[index] AT-AR1050V コマンドリファレンス 5.5.4
ISP接続用ユーザー名 | user@ispA | user@ispB |
ISP接続用パスワード | isppasswdA | isppasswdB |
PPPoEサービス名 | 指定なし | 指定なし |
WAN側IPアドレス | 10.0.0.1/32 | 動的割り当て(IPCP) |
DNSサーバー | 自動取得(IPCP) | 自動取得(IPCP) |
接続形態 | 端末型 | 端末型 |
WAN側物理インターフェース | eth1 | eth1 |
WAN側(ppp0)IPアドレス | 10.0.0.1/32 | 接続時にISPから取得 |
LAN側(vlan1)IPアドレス | 192.168.1.1/24 | 192.168.1.1/24 |
LAN側(vlan1)内部NAT前IPアドレス | 192.168.1.x/24 | 192.168.1.x/24 |
LAN側(vlan1)内部NAT後IPアドレス | 172.16.1.x/24 | 172.16.2.x/24 |
interface eth1 encapsulation ppp 0
interface ppp0 ppp ipcp dns request keepalive ppp username user@ispA ppp password isppasswdA ip address 10.0.0.1/32 ip tcp adjust-mss pmtu
interface vlan1 ip address 192.168.1.1/24
zone private network nat ip subnet 172.16.1.0/24 network peer ip subnet 172.16.2.0/24 interface tunnel0 network tun ip subnet 192.168.2.0/30 interface tunnel0 network v1 ip subnet 192.168.1.0/24
zone public network wan ip subnet 0.0.0.0/0 interface ppp0 host ppp0 ip address 10.0.0.1
application esp protocol 50
application isakmp protocol udp dport 500
firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.wan to public.wan.ppp0 rule 40 permit isakmp from public.wan.ppp0 to public.wan rule 50 permit esp from public.wan to public.wan.ppp0 rule 60 permit esp from public.wan.ppp0 to public.wan rule 70 permit dns from public.wan.ppp0 to public.wan rule 80 permit http from public.wan.ppp0 to public.wan protect
nat rule 10 masq any from private to public rule 20 netmap any from private.v1 to private.peer with src private.nat rule 30 netmap any from private.peer to private.nat with dst private.v1 enable
crypto isakmp key secret hostname RouterB
interface tunnel0 mtu 1300 tunnel source ppp0 tunnel destination dynamic tunnel remote name RouterB tunnel protection ipsec tunnel mode ipsec ipv4 ip address 192.168.2.1/30 ip tcp adjust-mss 1260
ip route 0.0.0.0/0 ppp0 ip route 172.16.2.0/24 tunnel0 ip route 172.16.2.0/24 Null 254
ip dns forwarding
end
interface eth1 encapsulation ppp 0
interface ppp0 ppp ipcp dns request keepalive ip address negotiated ppp username user@ispB ppp password isppasswdB ip tcp adjust-mss pmtu
interface vlan1 ip address 192.168.1.1/24
zone private network nat ip subnet 172.16.2.0/24 network peer ip subnet 172.16.1.0/24 interface tunnel0 network tun ip subnet 192.168.2.0/30 interface tunnel0 network v1 ip subnet 192.168.1.0/24
zone public network wan ip subnet 0.0.0.0/0 interface ppp0 host ppp0 ip address dynamic interface ppp0
application esp protocol 50
application isakmp protocol udp dport 500
firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.wan to public.wan.ppp0 rule 40 permit isakmp from public.wan.ppp0 to public.wan rule 50 permit esp from public.wan to public.wan.ppp0 rule 60 permit esp from public.wan.ppp0 to public.wan rule 70 permit dns from public.wan.ppp0 to public.wan rule 80 permit http from public.wan.ppp0 to public.wan protect
nat rule 10 masq any from private to public rule 20 netmap any from private.v1 to private.peer with src private.nat rule 30 netmap any from private.peer to private.nat with dst private.v1 enable
crypto isakmp key secret address 10.0.0.1
interface tunnel0 mtu 1300 tunnel source ppp0 tunnel destination 10.0.0.1 tunnel local name RouterB tunnel protection ipsec tunnel mode ipsec ipv4 ip address 192.168.2.2/30 ip tcp adjust-mss 1260
ip route 0.0.0.0/0 ppp0 ip route 172.16.1.0/24 tunnel0 ip route 172.16.1.0/24 Null 254
ip dns forwarding
end
copy running-config startup-config
」の書式で実行します。awplus# copy running-config startup-config ↓ Building configuration... [OK]
awplus# write memory ↓ Building configuration... [OK]
awplus(config)# log buffered level informational facility local5 ↓
awplus# show log | include Firewall ↓
! interface eth1 encapsulation ppp 0 ! interface ppp0 ppp ipcp dns request keepalive ppp username user@ispA ppp password isppasswdA ip address 10.0.0.1/32 ip tcp adjust-mss pmtu ! interface vlan1 ip address 192.168.1.1/24 ! zone private network nat ip subnet 172.16.1.0/24 network peer ip subnet 172.16.2.0/24 interface tunnel0 network tun ip subnet 192.168.2.0/30 interface tunnel0 network v1 ip subnet 192.168.1.0/24 ! zone public network wan ip subnet 0.0.0.0/0 interface ppp0 host ppp0 ip address 10.0.0.1 ! application esp protocol 50 ! application isakmp protocol udp dport 500 ! firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.wan to public.wan.ppp0 rule 40 permit isakmp from public.wan.ppp0 to public.wan rule 50 permit esp from public.wan to public.wan.ppp0 rule 60 permit esp from public.wan.ppp0 to public.wan rule 70 permit dns from public.wan.ppp0 to public.wan rule 80 permit http from public.wan.ppp0 to public.wan protect ! nat rule 10 masq any from private to public rule 20 netmap any from private.v1 to private.peer with src private.nat rule 30 netmap any from private.peer to private.nat with dst private.v1 enable ! crypto isakmp key secret hostname RouterB ! interface tunnel0 mtu 1300 tunnel source ppp0 tunnel destination dynamic tunnel remote name RouterB tunnel protection ipsec tunnel mode ipsec ipv4 ip address 192.168.2.1/30 ip tcp adjust-mss 1260 ! ip route 0.0.0.0/0 ppp0 ip route 172.16.2.0/24 tunnel0 ip route 172.16.2.0/24 Null 254 ! ip dns forwarding ! end
! interface eth1 encapsulation ppp 0 ! interface ppp0 ppp ipcp dns request keepalive ip address negotiated ppp username user@ispB ppp password isppasswdB ip tcp adjust-mss pmtu ! interface vlan1 ip address 192.168.1.1/24 ! zone private network nat ip subnet 172.16.2.0/24 network peer ip subnet 172.16.1.0/24 interface tunnel0 network tun ip subnet 192.168.2.0/30 interface tunnel0 network v1 ip subnet 192.168.1.0/24 ! zone public network wan ip subnet 0.0.0.0/0 interface ppp0 host ppp0 ip address dynamic interface ppp0 ! application esp protocol 50 ! application isakmp protocol udp dport 500 ! firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.wan to public.wan.ppp0 rule 40 permit isakmp from public.wan.ppp0 to public.wan rule 50 permit esp from public.wan to public.wan.ppp0 rule 60 permit esp from public.wan.ppp0 to public.wan rule 70 permit dns from public.wan.ppp0 to public.wan rule 80 permit http from public.wan.ppp0 to public.wan protect ! nat rule 10 masq any from private to public rule 20 netmap any from private.v1 to private.peer with src private.nat rule 30 netmap any from private.peer to private.nat with dst private.v1 enable ! crypto isakmp key secret address 10.0.0.1 ! interface tunnel0 mtu 1300 tunnel source ppp0 tunnel destination 10.0.0.1 tunnel local name RouterB tunnel protection ipsec tunnel mode ipsec ipv4 ip address 192.168.2.2/30 ip tcp adjust-mss 1260 ! ip route 0.0.0.0/0 ppp0 ip route 172.16.1.0/24 tunnel0 ip route 172.16.1.0/24 Null 254 ! ip dns forwarding ! end
(C) 2019 - 2024 アライドテレシスホールディングス株式会社
PN: 613-002735 Rev.AD