## CentreCOM AR415S 設定例集 2.9 ## 109 IPルートフィルター ## ルーターBのコンフィグ CREATE PPP=0 OVER=eth0-ANY SET PPP=0 OVER=eth0-ANY BAP=OFF IPREQUEST=OFF USER=user@ispB PASSWORD=isppasswdB LQR=OFF ECHO=ON ENABLE IP ADD IP INT=ppp0 IP=12.34.56.78 MASK=255.255.255.255 ADD IP INT=vlan1 IP=192.168.2.100 MASK=255.255.255.0 ADD IP ROUTE=0.0.0.0 INT=ppp0 NEXTHOP=0.0.0.0 ENABLE L2TP ENABLE L2TP SERVER=BOTH SET L2TP PASSWORD=l2tpB ADD L2TP CALL=remote IP=4.4.4.1 TYPE=VIRTUAL REMOTE=remote PRECEDENCE=OUT PASSWORD=l2tpA CREATE PPP=1 OVER=TNL-remote IDLE=ON BAP=OFF LQR=OFF ADD IP INT=ppp1 IP=1.1.1.2 MASK=255.255.255.252 ENABLE FIREWALL CREATE FIREWALL POLICY=net ENABLE FIREWALL POLICY=net ICMP_F=PING,UNREACH DISABLE FIREWALL POLICY=net IDENTPROXY ADD FIREWALL POLICY=net INT=vlan1 TYPE=PRIVATE ADD FIREWALL POLICY=net INT=ppp0 TYPE=PUBLIC ADD FIREWALL POLICY=net INT=ppp1 TYPE=PRIVATE ADD FIREWALL POLICY=net NAT=ENHANCED INT=vlan1 GBLINT=ppp0 GBLIP=12.34.56.78 ADD FIREWALL POLICY=net RULE=1 AC=ALLOW INT=ppp0 PROTO=UDP GBLPO=1701 GBLIP=12.34.56.78 PO=1701 IP=12.34.56.78 ADD IP RIP INT=vlan1 SEND=RIP2 RECEIVE=RIP2 ADD IP RIP INT=ppp1 SEND=RIP2 RECEIVE=RIP2 ADD IP ROUTE FILTER IP=12.34.56.78 MASK=255.255.255.255 AC=EXCLUDE DIRECTION=SEND INT=ppp1 PROTOCOL=RIP ADD IP ROUTE FILTER IP=0.0.0.0 MASK=0.0.0.0 AC=EXCLUDE DIRECTION=SEND INT=ppp1 PROTOCOL=RIP ADD IP ROUTE FILTER IP=*.*.*.* MASK=*.*.*.* ACTION=INCLUDE INT=ppp1 PROTOCOL=RIP