## CentreCOM AR570S 設定例集 2.9 ## 67 IPフィルター ## ルーターAのコンフィグ CREATE PPP=0 OVER=eth0-ANY SET PPP=0 OVER=eth0-ANY BAP=OFF IPREQUEST=OFF USER=user@ispA PASSWORD=isppasswdA LQR=OFF ECHO=ON ENABLE IP ADD IP INT=ppp0 IP=4.4.4.1 MASK=255.255.255.255 ADD IP INT=vlan1 IP=192.168.10.1 MASK=255.255.255.0 ADD IP ROUTE=0.0.0.0 INT=ppp0 NEXTHOP=0.0.0.0 ENABLE L2TP ENABLE L2TP SERVER=BOTH SET L2TP PASSWORD=l2tpA ADD L2TP CALL=remote IP=12.34.56.78 TYPE=VIRTUAL REMOTE=remote PRECEDENCE=IN PASSWORD=l2tpB CREATE PPP=1 OVER=TNL-remote IDLE=ON BAP=OFF LQR=ON ADD IP INT=ppp1 IP=0.0.0.0 ADD IP ROUTE=192.168.20.0 MASK=255.255.255.0 INT=ppp1 NEXT=0.0.0.0 ENABLE FIREWALL CREATE FIREWALL POLICY=net ENABLE FIREWALL POLICY=net ICMP_F=PING,UNREACH DISABLE FIREWALL POLICY=net IDENTPROXY ADD FIREWALL POLICY=net INT=ppp0 TYPE=PUBLIC ADD FIREWALL POLICY=net INT=vlan1 TYPE=PRIVATE ADD FIREWALL POLICY=net INT=ppp1 TYPE=PRIVATE ADD FIREWALL POLICY=net NAT=ENHANCED INT=vlan1 GBLINT=ppp0 GBLIP=4.4.4.1 ADD FIREWALL POLICY=net RULE=1 AC=ALLOW INT=ppp0 PROTO=UDP GBLPO=1701 GBLIP=4.4.4.1 PO=1701 IP=4.4.4.1 ADD IP FILT=1 TYPE=TRAFFIC SO=192.168.20.4 SM=255.255.255.255 DEST=192.168.10.2 DM=255.255.255.255 AC=INCLUDE DPORT=TELNET PROT=TCP SESS=ANY ADD IP FILT=1 TYPE=TRAFFIC SO=192.168.20.5 SM=255.255.255.255 DEST=192.168.10.2 DM=255.255.255.255 AC=INCLUDE DPORT=FTPDATA PROT=TCP SESS=ESTABLISHED ADD IP FILT=1 TYPE=TRAFFIC SO=192.168.20.5 SM=255.255.255.255 DEST=192.168.10.2 DM=255.255.255.255 AC=INCLUDE DPORT=FTP PROT=TCP SESS=ANY ADD IP FILT=1 TYPE=TRAFFIC SO=192.168.20.5 SM=255.255.255.255 DEST=192.168.10.2 DM=255.255.255.255 AC=INCLUDE DPORT=TELNET PROT=TCP SESS=ANY ADD IP FILT=1 TYPE=TRAFFIC SO=192.168.20.6 SM=255.255.255.255 DEST=192.168.10.2 DM=255.255.255.255 AC=INCLUDE DPORT=FTPDATA PROT=TCP SESS=ESTABLISHED ADD IP FILT=1 TYPE=TRAFFIC SO=192.168.20.6 SM=255.255.255.255 DEST=192.168.10.2 DM=255.255.255.255 AC=INCLUDE DPORT=FTP PROT=TCP SESS=ANY SET IP INT=ppp1 FILT=1