## CentreCOM AR415S 設定例集 2.9
##  109 IPルートフィルター
##  ルーターAのコンフィグ

CREATE PPP=0 OVER=eth0-ANY
SET PPP=0 OVER=eth0-ANY BAP=OFF IPREQUEST=OFF USER=user@ispA PASSWORD=isppasswdA LQR=OFF ECHO=ON
ENABLE IP
ADD IP INT=ppp0 IP=4.4.4.1 MASK=255.255.255.255
ADD IP INT=vlan1 IP=192.168.1.100 MASK=255.255.255.0
ADD IP ROUTE=0.0.0.0 INT=ppp0 NEXTHOP=0.0.0.0
ENABLE L2TP
ENABLE L2TP SERVER=BOTH
SET L2TP PASSWORD=l2tpA
ADD L2TP CALL=remote IP=12.34.56.78 TYPE=VIRTUAL REMOTE=remote PRECEDENCE=IN PASSWORD=l2tpB
CREATE PPP=1 OVER=TNL-remote IDLE=ON BAP=OFF LQR=OFF
ADD IP INT=ppp1 IP=1.1.1.1 MASK=255.255.255.252
ENABLE FIREWALL
CREATE FIREWALL POLICY=net
ENABLE FIREWALL POLICY=net ICMP_F=PING,UNREACH
DISABLE FIREWALL POLICY=net IDENTPROXY
ADD FIREWALL POLICY=net INT=ppp0 TYPE=PUBLIC
ADD FIREWALL POLICY=net INT=vlan1 TYPE=PRIVATE
ADD FIREWALL POLICY=net INT=ppp1 TYPE=PRIVATE
ADD FIREWALL POLICY=net NAT=ENHANCED INT=vlan1 GBLINT=ppp0 GBLIP=4.4.4.1
ADD FIREWALL POLICY=net RULE=1 AC=ALLOW INT=ppp0 PROTO=UDP GBLPO=1701 GBLIP=4.4.4.1 PO=1701 IP=4.4.4.1
ADD IP RIP INT=ppp1 SEND=RIP2 RECEIVE=RIP2
ADD OSPF AREA=BACKBONE
ADD OSPF RANGE=192.168.1.0 MASK=255.255.255.0 AREA=BACKBONE
ADD OSPF INT=vlan1 AREA=BACKBONE
SET OSPF ASEXTERNAL=ON RIP=BOTH
ENABLE OSPF
ADD IP ROUTE FILTER IP=192.168.100.* MASK=255.255.255.* AC=EXCLUDE DIR=RECEIVE INT=vlan1 PROTO=OSPF
ADD IP ROUTE FILTER IP=*.*.*.* MASK=*.*.*.* AC=INCLUDE DIR=SEND INT=vlan1 PROTO=OSPF
ADD IP ROUTE FILTER IP=*.*.*.* MASK=*.*.*.* AC=INCLUDE DIR=RECEIVE INT=vlan1 PROTO=OSPF
ADD IP ROUTE FILTER IP=4.4.4.1 MASK=255.255.255.255 AC=EXCLUDE DIRECTION=SEND INT=ppp1 PROTOCOL=RIP
ADD IP ROUTE FILTER IP=0.0.0.0 MASK=0.0.0.0 AC=EXCLUDE DIRECTION=SEND INT=ppp1 PROTOCOL=RIP
ADD IP ROUTE FILTER IP=*.*.*.* MASK=*.*.*.* ACTION=INCLUDE INT=ppp1 PROTOCOL=RIP