[index] AT-AR1050V コマンドリファレンス 5.5.4
NoteダイナミックDNSサービスに障害が発生した場合、IPsec VPNの確立が行えない場合があります。信頼性が必要とされるネットワークでは、固定IPアドレス契約の利用をご検討ください。
Note検証済みダイナミックDNSサービスは弊社ホームページをご確認ください。
ISP接続用ユーザー名 | user@ispA | user@ispB |
ISP接続用パスワード | isppasswdA | isppasswdB |
PPPoEサービス名 | 指定なし | 指定なし |
WAN側IPアドレス | 動的割り当て(IPCP) | 動的割り当て(IPCP) |
DNSサーバー | 自動取得(IPCP) | 自動取得(IPCP) |
接続形態 | 端末型 | 端末型 |
WAN側物理インターフェース | eth1 | eth1 |
WAN側(ppp0)IPアドレス | 接続時にISP-Aから取得 | 接続時にISP-Bから取得 |
LAN側(vlan1)IPアドレス | 192.168.10.1/24 | 192.168.20.1/24 |
IKEバージョン | ||
ローカルID | test1.example.com | test2.example.com |
リモートID | test2.example.com | test1.example.com |
サーバーのFQDN | members.example.com | members.example.com |
サーバーのTCPポート番号 | 443 | 443 |
サーバー接続用ユーザー名 | test | test |
サーバー接続用パスワード | test | test |
ホスト名 | test1.example.com | test2.example.com |
IPアドレスを登録するインターフェース | ppp0 | ppp0 |
NoteルーターA、Bが使用するホスト名やダイナミックDNSサーバーにアクセスするためのアカウントは、あらかじめ取得してあるものとします。
ホスト名やアカウントの取得については、ダイナミックDNSサービスの利用開始手順をご覧ください。
ddns enable
?
」をCLIから入力するには、Ctrl/V
キーを入力してから ?
を入力してください。単に ?
を入力するとCLIヘルプが表示されてしまうためご注意ください。ddns-update-method example update-url https://<USERNAME>:<PASSWORD>@members.example.com/nic/update?SYSTEM=dyndns&hostname=<HOST-NAME>&myip=<IPADDRESS> host-name test1.example.com username test password test update-interval 60 retry-interval 1 maximum-retries 5
interface eth1 encapsulation ppp 0
interface ppp0 ip ddns-update-method example ppp ipcp dns request keepalive ip address negotiated ppp username user@ispA ppp password isppasswdA ip tcp adjust-mss pmtu
interface vlan1 ip address 192.168.10.1/24
zone private network lan ip subnet 192.168.10.0/24 network peer ip subnet 192.168.20.0/24 interface tunnel0 network tunnel ip subnet 172.16.0.0/30
zone public network wan ip subnet 0.0.0.0/0 interface ppp0 host ppp0 ip address dynamic interface ppp0
application esp protocol 50
application isakmp protocol udp sport 500 dport 500
firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.wan.ppp0 to public.wan rule 40 permit isakmp from public.wan to public.wan.ppp0 rule 50 permit esp from public.wan.ppp0 to public.wan rule 60 permit esp from public.wan to public.wan.ppp0 rule 70 permit dns from public.wan.ppp0 to public.wan rule 80 permit https from public.wan.ppp0 to public.wan protect
nat rule 10 masq any from private to public enable
crypto isakmp key secret hostname test2.example.com
interface tunnel0 mtu 1300 tunnel source ppp0 tunnel destination test2.example.com tunnel local name test1.example.com tunnel remote name test2.example.com tunnel protection ipsec tunnel mode ipsec ipv4 ip address 172.16.0.1/30 ip tcp adjust-mss 1260
ping-poll 1 ip 172.16.0.2 active
trigger 1 type ping-poll 1 down script 1 periodic-update.scp trigger 2 type ping-poll 1 up script 1 periodic-update-delete.scp trigger 3 type periodic 1 script 1 host-change.scp
ip route 0.0.0.0/0 ppp0 ip route 192.168.20.0/24 tunnel0 ip route 192.168.20.0/24 Null 254
ip dns forwarding
end
ddns enable
?
」をCLIから入力するには、Ctrl/V
キーを入力してから ?
を入力してください。単に ?
を入力するとCLIヘルプが表示されてしまうためご注意ください。ddns-update-method example update-url https://<USERNAME>:<PASSWORD>@members.example.com/nic/update?SYSTEM=dyndns&hostname=<HOST-NAME>&myip=<IPADDRESS> host-name test2.example.com username test password test update-interval 60 retry-interval 10 maximum-retries 5
interface eth1 encapsulation ppp 0
interface ppp0 ip ddns-update-method example ppp ipcp dns request keepalive ip address negotiated ppp username user@isp2 ppp password isppasswd2 ip tcp adjust-mss pmtu
interface vlan1 ip address 192.168.20.1/24
zone private network lan ip subnet 192.168.20.0/24 network peer ip subnet 192.168.10.0/24 interface tunnel0 network tunnel ip subnet 172.16.0.0/30
zone public network wan ip subnet 0.0.0.0/0 interface ppp0 host ppp0 ip address dynamic interface ppp0
application esp protocol 50
application isakmp protocol udp sport 500 dport 500
firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.wan.ppp0 to public.wan rule 40 permit isakmp from public.wan to public.wan.ppp0 rule 50 permit esp from public.wan.ppp0 to public.wan rule 60 permit esp from public.wan to public.wan.ppp0 rule 70 permit dns from public.wan.ppp0 to public.wan rule 80 permit https from public.wan.ppp0 to public.wan protect
nat rule 10 masq any from private to public enable
crypto isakmp key secret hostname test1.example.com
interface tunnel0 mtu 1300 tunnel source ppp0 tunnel destination test1.example.com tunnel local name test2.example.com tunnel remote name test1.example.com tunnel protection ipsec tunnel mode ipsec ipv4 ip address 172.16.0.2/30 ip tcp adjust-mss 1260
ping-poll 1 ip 172.16.0.1 active
trigger 1 type ping-poll 1 down script 1 periodic-update.scp trigger 2 type ping-poll 1 up script 1 periodic-update-delete.scp trigger 3 type periodic 1 script 1 host-change.scp
ip route 0.0.0.0/0 ppp0 ip route 192.168.10.0/24 tunnel0 ip route 192.168.10.0/24 Null 254
ip dns forwarding
end
copy running-config startup-config
」の書式で実行します。awplus# copy running-config startup-config ↓ Building configuration... [OK]
awplus# write memory ↓ Building configuration... [OK]
awplus(config)# log buffered level informational facility local5 ↓
awplus# show log | include Firewall ↓
! ddns enable ! ddns-update-method example update-url https://<USERNAME>:<PASSWORD>@members.example.com/nic/update?SYSTEM=dyndns&hostname=<HOST-NAME>&myip=<IPADDRESS> host-name test1.example.com username test password test update-interval 60 retry-interval 1 maximum-retries 5 ! interface eth1 encapsulation ppp 0 ! interface ppp0 ip ddns-update-method example ppp ipcp dns request keepalive ip address negotiated ppp username user@ispA ppp password isppasswdA ip tcp adjust-mss pmtu ! interface vlan1 ip address 192.168.10.1/24 ! zone private network lan ip subnet 192.168.10.0/24 network peer ip subnet 192.168.20.0/24 interface tunnel0 network tunnel ip subnet 172.16.0.0/30 ! zone public network wan ip subnet 0.0.0.0/0 interface ppp0 host ppp0 ip address dynamic interface ppp0 ! application esp protocol 50 ! application isakmp protocol udp sport 500 dport 500 ! firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.wan.ppp0 to public.wan rule 40 permit isakmp from public.wan to public.wan.ppp0 rule 50 permit esp from public.wan.ppp0 to public.wan rule 60 permit esp from public.wan to public.wan.ppp0 rule 70 permit dns from public.wan.ppp0 to public.wan rule 80 permit https from public.wan.ppp0 to public.wan protect ! nat rule 10 masq any from private to public enable ! crypto isakmp key secret hostname test2.example.com ! interface tunnel0 mtu 1300 tunnel source ppp0 tunnel destination test2.example.com tunnel local name test1.example.com tunnel remote name test2.example.com tunnel protection ipsec tunnel mode ipsec ipv4 ip address 172.16.0.1/30 ip tcp adjust-mss 1260 ! ping-poll 1 ip 172.16.0.2 active ! trigger 1 type ping-poll 1 down script 1 periodic-update.scp trigger 2 type ping-poll 1 up script 1 periodic-update-delete.scp trigger 3 type periodic 1 script 1 host-change.scp ! ip route 0.0.0.0/0 ppp0 ip route 192.168.20.0/24 tunnel0 ip route 192.168.20.0/24 Null 254 ! ip dns forwarding ! end
! ddns enable ! ddns-update-method example update-url https://<USERNAME>:<PASSWORD>@members.example.com/nic/update?SYSTEM=dyndns&hostname=<HOST-NAME>&myip=<IPADDRESS> host-name test2.example.com username test password test update-interval 60 retry-interval 10 maximum-retries 5 ! interface eth1 encapsulation ppp 0 ! interface ppp0 ip ddns-update-method example ppp ipcp dns request keepalive ip address negotiated ppp username user@isp2 ppp password isppasswd2 ip tcp adjust-mss pmtu ! interface vlan1 ip address 192.168.20.1/24 ! zone private network lan ip subnet 192.168.20.0/24 network peer ip subnet 192.168.10.0/24 interface tunnel0 network tunnel ip subnet 172.16.0.0/30 ! zone public network wan ip subnet 0.0.0.0/0 interface ppp0 host ppp0 ip address dynamic interface ppp0 ! application esp protocol 50 ! application isakmp protocol udp sport 500 dport 500 ! firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.wan.ppp0 to public.wan rule 40 permit isakmp from public.wan to public.wan.ppp0 rule 50 permit esp from public.wan.ppp0 to public.wan rule 60 permit esp from public.wan to public.wan.ppp0 rule 70 permit dns from public.wan.ppp0 to public.wan rule 80 permit https from public.wan.ppp0 to public.wan protect ! nat rule 10 masq any from private to public enable ! crypto isakmp key secret hostname test1.example.com ! interface tunnel0 mtu 1300 tunnel source ppp0 tunnel destination test1.example.com tunnel local name test2.example.com tunnel remote name test1.example.com tunnel protection ipsec tunnel mode ipsec ipv4 ip address 172.16.0.2/30 ip tcp adjust-mss 1260 ! ping-poll 1 ip 172.16.0.1 active ! trigger 1 type ping-poll 1 down script 1 periodic-update.scp trigger 2 type ping-poll 1 up script 1 periodic-update-delete.scp trigger 3 type periodic 1 script 1 host-change.scp ! ip route 0.0.0.0/0 ppp0 ip route 192.168.10.0/24 tunnel0 ip route 192.168.10.0/24 Null 254 ! ip dns forwarding ! end
enable con t trigger 3 active end
enable con t trigger 3 no active end
enable clear isakmp sa peer test2.example.com force con t int tunnel0 tunnel destination test2.example.com end
enable con t trigger 3 active end
enable con t trigger 3 no active end
enable clear isakmp sa peer test1.example.com force con t int tunnel0 tunnel destination test1.example.com end
(C) 2019 - 2024 アライドテレシスホールディングス株式会社
PN: 613-002735 Rev.AD