[index] AT-AR2050V/AT-AR3050S/AT-AR4050S コマンドリファレンス 5.4.9
Note本設定例ではWANポートを2つ使用するため、AT-AR2050Vは使用できません。
| ISP接続用ユーザー名 | user@ispA | user@ispB |
| ISP接続用パスワード | isppasswdA | isppasswdB |
| PPPoEサービス名 | 指定なし | 指定なし |
| WAN側IPアドレス | 動的割り当て（IPCP） | 動的割り当て（IPCP） |
| DNSサーバーIPアドレス | 自動取得（IPCP） | 自動取得（IPCP） |
no spanning-tree rstp enable
interface eth1 encapsulation ppp 0
interface ppp0 ppp ipcp dns request keepalive ip address negotiated ppp username user@ispA ppp password isppasswdA ip tcp adjust-mss pmtu
interface eth2 encapsulation ppp 1
interface ppp1 ppp ipcp dns request keepalive ip address negotiated ppp username user@ispB ppp password isppasswdB ip tcp adjust-mss pmtu
vlan database vlan 10,20,30 state enable
interface port1.0.1-1.0.2 switchport switchport mode trunk switchport trunk allowed vlan add 10,20 static-channel-group 1
interface port1.0.3 switchport switchport mode access switchport access vlan 30
interface vlan10 ip address 192.168.10.1/24
interface vlan20 ip address 192.168.20.1/24
interface vlan30 ip address 192.168.30.1/24
router rip network 192.168.10.0/24 network 192.168.20.0/24 network 192.168.30.0/24 passive-interface vlan10 passive-interface vlan20 redistribute static
router vrrp 10 vlan10 virtual-ip 192.168.10.100 backup ha associate wan-bypass 1 enable
router vrrp 20 vlan20 virtual-ip 192.168.20.100 backup priority 101 ha associate enable
zone private network internal ip subnet 192.168.10.0/24 ip subnet 192.168.20.0/24 ip subnet 192.168.30.0/24 ip subnet 192.168.100.0/24 ip subnet 192.168.200.0/24 network rip ip subnet 224.0.0.9/32 network vrrp ip subnet 224.0.0.18/32
zone public network wan ip subnet 0.0.0.0/0 ip subnet 0.0.0.0/0 interface ppp0 ip subnet 0.0.0.0/0 interface ppp1 host ppp0 ip address dynamic interface ppp0 host ppp1 ip address dynamic interface ppp1
firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit dns from public.wan.ppp0 to public.wan rule 40 permit dns from public.wan.ppp1 to public.wan protect
nat rule 10 masq any from private to public enable
ip route 0.0.0.0/0 ppp0 ip route 0.0.0.0/0 ppp1 100 ip route 192.168.100.0/24 192.168.10.3 ip route 192.168.200.0/24 192.168.20.3
trigger 1 type interface ppp0 up script 1 flash:/ppp0_up.scp trigger 2 type interface ppp1 up script 1 flash:/ppp1_up.scp trigger 3 type interface ppp0 down script 1 flash:/ppp0_down.scp trigger 4 type interface ppp1 down script 1 flash:/ppp1_down.scp
ip dns forwarding
end
no spanning-tree rstp enable
interface eth1 encapsulation ppp 0
interface ppp0 ppp ipcp dns request keepalive ip address negotiated ppp username user@ispA ppp password isppasswdA ip tcp adjust-mss pmtu
interface eth2 encapsulation ppp 1
interface ppp1 ppp ipcp dns request keepalive ip address negotiated ppp username user@ispB ppp password isppasswdB ip tcp adjust-mss pmtu
vlan database vlan 10,20,30 state enable
interface port1.0.1-1.0.2 switchport switchport mode trunk switchport trunk allowed vlan add 10,20 static-channel-group 1
interface port1.0.3 switchport switchport mode access switchport access vlan 30
interface vlan10 ip address 192.168.10.2/24
interface vlan20 ip address 192.168.20.2/24
interface vlan30 ip address 192.168.30.2/24
router rip network 192.168.10.0/24 network 192.168.20.0/24 network 192.168.30.0/24 passive-interface vlan10 passive-interface vlan20 redistribute static
router vrrp 10 vlan10 virtual-ip 192.168.10.100 backup priority 101 ha associate enable
router vrrp 20 vlan20 virtual-ip 192.168.20.100 backup ha associate wan-bypass 2 enable
zone private network internal ip subnet 192.168.10.0/24 ip subnet 192.168.20.0/24 ip subnet 192.168.30.0/24 ip subnet 192.168.100.0/24 ip subnet 192.168.200.0/24 network rip ip subnet 224.0.0.9/32 network vrrp ip subnet 224.0.0.18/32
zone public network wan ip subnet 0.0.0.0/0 ip subnet 0.0.0.0/0 interface ppp0 ip subnet 0.0.0.0/0 interface ppp1 host ppp0 ip address dynamic interface ppp0 host ppp1 ip address dynamic interface ppp1
firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit dns from public.wan.ppp0 to public.wan rule 40 permit dns from public.wan.ppp1 to public.wan protect
nat rule 10 masq any from private to public enable
ip route 0.0.0.0/0 ppp0 100 ip route 0.0.0.0/0 ppp1 ip route 192.168.100.0/24 192.168.10.3 ip route 192.168.200.0/24 192.168.20.3
trigger 1 type interface ppp0 up script 1 flash:/ppp0_up.scp trigger 2 type interface ppp1 up script 1 flash:/ppp1_up.scp trigger 3 type interface ppp0 down script 1 flash:/ppp0_down.scp trigger 4 type interface ppp1 down script 1 flash:/ppp1_down.scp
ip dns forwarding
end
copy running-config startup-config」の書式で実行します。awplus# copy running-config startup-config ↓ Building configuration... [OK]
awplus# write memory ↓ Building configuration... [OK]
awplus(config)# log buffered level informational facility kern msgtext Firewall ↓
awplus# show log | include Firewall ↓
! no spanning-tree rstp enable ! interface eth1 encapsulation ppp 0 ! interface ppp0 ppp ipcp dns request keepalive ip address negotiated ppp username user@ispA ppp password isppasswdA ip tcp adjust-mss pmtu ! interface eth2 encapsulation ppp 1 ! interface ppp1 ppp ipcp dns request keepalive ip address negotiated ppp username user@ispB ppp password isppasswdB ip tcp adjust-mss pmtu ! vlan database vlan 10,20,30 state enable ! interface port1.0.1-1.0.2 switchport switchport mode trunk switchport trunk allowed vlan add 10,20 static-channel-group 1 ! interface port1.0.3 switchport switchport mode access switchport access vlan 30 ! interface vlan10 ip address 192.168.10.1/24 ! interface vlan20 ip address 192.168.20.1/24 ! interface vlan30 ip address 192.168.30.1/24 ! router rip network 192.168.10.0/24 network 192.168.20.0/24 network 192.168.30.0/24 passive-interface vlan10 passive-interface vlan20 redistribute static ! router vrrp 10 vlan10 virtual-ip 192.168.10.100 backup ha associate wan-bypass 1 enable ! router vrrp 20 vlan20 virtual-ip 192.168.20.100 backup priority 101 ha associate enable ! zone private network internal ip subnet 192.168.10.0/24 ip subnet 192.168.20.0/24 ip subnet 192.168.30.0/24 ip subnet 192.168.100.0/24 ip subnet 192.168.200.0/24 network rip ip subnet 224.0.0.9/32 network vrrp ip subnet 224.0.0.18/32 ! zone public network wan ip subnet 0.0.0.0/0 ip subnet 0.0.0.0/0 interface ppp0 ip subnet 0.0.0.0/0 interface ppp1 host ppp0 ip address dynamic interface ppp0 host ppp1 ip address dynamic interface ppp1 ! firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit dns from public.wan.ppp0 to public.wan rule 40 permit dns from public.wan.ppp1 to public.wan protect ! nat rule 10 masq any from private to public enable ! ip route 0.0.0.0/0 ppp0 ip route 0.0.0.0/0 ppp1 100 ip route 192.168.100.0/24 192.168.10.3 ip route 192.168.200.0/24 192.168.20.3 ! trigger 1 type interface ppp0 up script 1 flash:/ppp0_up.scp trigger 2 type interface ppp1 up script 1 flash:/ppp1_up.scp trigger 3 type interface ppp0 down script 1 flash:/ppp0_down.scp trigger 4 type interface ppp1 down script 1 flash:/ppp1_down.scp ! ip dns forwarding ! end
! no spanning-tree rstp enable ! interface eth1 encapsulation ppp 0 ! interface ppp0 ppp ipcp dns request keepalive ip address negotiated ppp username user@ispA ppp password isppasswdA ip tcp adjust-mss pmtu ! interface eth2 encapsulation ppp 1 ! interface ppp1 ppp ipcp dns request keepalive ip address negotiated ppp username user@ispB ppp password isppasswdB ip tcp adjust-mss pmtu ! vlan database vlan 10,20,30 state enable ! interface port1.0.1-1.0.2 switchport switchport mode trunk switchport trunk allowed vlan add 10,20 static-channel-group 1 ! interface port1.0.3 switchport switchport mode access switchport access vlan 30 ! interface vlan10 ip address 192.168.10.2/24 ! interface vlan20 ip address 192.168.20.2/24 ! interface vlan30 ip address 192.168.30.2/24 ! router rip network 192.168.10.0/24 network 192.168.20.0/24 network 192.168.30.0/24 passive-interface vlan10 passive-interface vlan20 redistribute static ! router vrrp 10 vlan10 virtual-ip 192.168.10.100 backup priority 101 ha associate enable ! router vrrp 20 vlan20 virtual-ip 192.168.20.100 backup ha associate wan-bypass 2 enable ! zone private network internal ip subnet 192.168.10.0/24 ip subnet 192.168.20.0/24 ip subnet 192.168.30.0/24 ip subnet 192.168.100.0/24 ip subnet 192.168.200.0/24 network rip ip subnet 224.0.0.9/32 network vrrp ip subnet 224.0.0.18/32 ! zone public network wan ip subnet 0.0.0.0/0 ip subnet 0.0.0.0/0 interface ppp0 ip subnet 0.0.0.0/0 interface ppp1 host ppp0 ip address dynamic interface ppp0 host ppp1 ip address dynamic interface ppp1 ! firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit dns from public.wan.ppp0 to public.wan rule 40 permit dns from public.wan.ppp1 to public.wan protect ! nat rule 10 masq any from private to public enable ! ip route 0.0.0.0/0 ppp0 100 ip route 0.0.0.0/0 ppp1 ip route 192.168.100.0/24 192.168.10.3 ip route 192.168.200.0/24 192.168.20.3 ! trigger 1 type interface ppp0 up script 1 flash:/ppp0_up.scp trigger 2 type interface ppp1 up script 1 flash:/ppp1_up.scp trigger 3 type interface ppp0 down script 1 flash:/ppp0_down.scp trigger 4 type interface ppp1 down script 1 flash:/ppp1_down.scp ! ip dns forwarding ! end
ena conf t router rip network ppp0 passive-interface ppp0 end
ena conf t router rip network ppp1 passive-interface ppp1 end
ena conf t router rip no network ppp0 no passive-interface ppp0 end
ena conf t router rip no network ppp1 no passive-interface ppp1 end
(C) 2015 - 2019 アライドテレシスホールディングス株式会社
PN: 613-002107 Rev.AA