## CentreCOM AR570S 設定例集 2.9
##  109 IPルートフィルター
##  ルーターBのコンフィグ

CREATE PPP=0 OVER=eth0-ANY
SET PPP=0 OVER=eth0-ANY BAP=OFF IPREQUEST=OFF USER=user@ispB PASSWORD=isppasswdB LQR=OFF ECHO=ON
ENABLE IP
ADD IP INT=ppp0 IP=12.34.56.78 MASK=255.255.255.255
ADD IP INT=vlan1 IP=192.168.2.100 MASK=255.255.255.0
ADD IP ROUTE=0.0.0.0 INT=ppp0 NEXTHOP=0.0.0.0
ENABLE L2TP
ENABLE L2TP SERVER=BOTH
SET L2TP PASSWORD=l2tpB
ADD L2TP CALL=remote IP=4.4.4.1 TYPE=VIRTUAL REMOTE=remote PRECEDENCE=OUT PASSWORD=l2tpA
CREATE PPP=1 OVER=TNL-remote IDLE=ON BAP=OFF LQR=OFF
ADD IP INT=ppp1 IP=1.1.1.2 MASK=255.255.255.252
ENABLE FIREWALL
CREATE FIREWALL POLICY=net
ENABLE FIREWALL POLICY=net ICMP_F=PING,UNREACH
DISABLE FIREWALL POLICY=net IDENTPROXY
ADD FIREWALL POLICY=net INT=vlan1 TYPE=PRIVATE
ADD FIREWALL POLICY=net INT=ppp0 TYPE=PUBLIC
ADD FIREWALL POLICY=net INT=ppp1 TYPE=PRIVATE
ADD FIREWALL POLICY=net NAT=ENHANCED INT=vlan1 GBLINT=ppp0 GBLIP=12.34.56.78
ADD FIREWALL POLICY=net RULE=1 AC=ALLOW INT=ppp0 PROTO=UDP GBLPO=1701 GBLIP=12.34.56.78 PO=1701 IP=12.34.56.78
ADD IP RIP INT=vlan1 SEND=RIP2 RECEIVE=RIP2
ADD IP RIP INT=ppp1 SEND=RIP2 RECEIVE=RIP2
ADD IP ROUTE FILTER IP=12.34.56.78 MASK=255.255.255.255 AC=EXCLUDE DIRECTION=SEND INT=ppp1 PROTOCOL=RIP
ADD IP ROUTE FILTER IP=0.0.0.0 MASK=0.0.0.0 AC=EXCLUDE DIRECTION=SEND INT=ppp1 PROTOCOL=RIP
ADD IP ROUTE FILTER IP=*.*.*.* MASK=*.*.*.* ACTION=INCLUDE INT=ppp1 PROTOCOL=RIP