[index] AT-TQRシリーズ コマンドリファレンス 5.5.3
| ISP接続用ユーザー名 | user@isp |
| ISP接続用パスワード | isppasswd |
| PPPoEサービス名 | 指定なし |
| 使用できるアドレス | 10.0.0.0/29（10.0.0.0～10.0.0.7） |
| 接続形態 | LAN型（アドレス8個固定） |
| WAN側物理インターフェース | eth2 |
| WAN側（ppp0）IPアドレス | Unnumbered |
| LAN側（端末用）（vap1.0）IPアドレス | 192.168.10.1/24 |
| LAN側（サーバー用）（eth1）IPアドレス | 192.168.20.1/24 |
awplus(config)# wireless ↓ awplus(config-wireless)# ap-profile local ↓ awplus(config-wireless-ap-prof)# radio 1 ↓ awplus(config-wireless-ap-prof-radio)# enable ↓ awplus(config-wireless-ap-prof-radio)# end ↓
awplus# wireless ap-configuration apply ap local ↓
Note本設定例では、ルーターとしての全体的な設定を示すため、無線機能に関してはデフォルト設定を利用した最小限の設定のみを示しています。
実際の運用にあたっては、「無線機能」章にある設定のポイントなどをご参照の上、SSID、セキュリティーなど要件にあわせた適切な設定を行ってから本手順（無線設定の適用）を実行してください。
wireless network 1 ssid allied24 network 17 ssid allied5-1 ap-profile local radio 1 enable vap 0 network 1 radio 2 vap 0 network 17 ap local
interface eth2 encapsulation ppp 0
interface ppp0 keepalive ppp ipcp ip-override ppp username user@isp ppp password isppasswd ip unnumbered lo ip tcp adjust-mss pmtu
interface lo ip address 10.0.0.1/32
interface vap1.0 ip address 192.168.10.1/24
interface eth1 ip address 192.168.20.1/24
zone private network lan1 ip subnet 192.168.10.0/24 network lan2 ip subnet 192.168.20.0/24 host dns ip address 192.168.20.4 host smtp ip address 192.168.20.3 host web ip address 192.168.20.2
zone public network wan ip subnet 0.0.0.0/0 interface ppp0 host ppp0 ip address 10.0.0.1
zone global network ip8 ip subnet 10.0.0.0/29 host dns ip address 10.0.0.4 host smtp ip address 10.0.0.3 host web ip address 10.0.0.2
application dns_tcp protocol tcp sport any dport 53
firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit any from private to global rule 40 permit any from global to global rule 50 permit any from global to public rule 60 permit http from public to private.lan2.web rule 70 permit smtp from public to private.lan2.smtp rule 80 permit dns from public to private.lan2.dns rule 90 permit dns_tcp from public to private.lan.dns protect
nat rule 10 masq any from private to public with src public.wan.ppp0 rule 20 portfwd http from public to global.ip8.web with dst private.lan2.web rule 30 portfwd smtp from public to global.ip8.smtp with dst private.lan2.smtp rule 40 portfwd dns from public to global.ip8.dns with dst private.lan2.dns rule 50 portfwd dns_tcp from public to global.ip8.dns with dst private.lan2.dns enable
ip route 0.0.0.0/0 ppp0
log buffered level informational
end
copy running-config startup-config」の書式で実行します。awplus# copy running-config startup-config ↓ Building configuration... [OK]
awplus# write memory ↓ Building configuration... [OK]
awplus(config)# log buffered level informational facility local5 ↓
awplus# show log | include Firewall ↓
! interface eth2 encapsulation ppp 0 ! interface ppp0 keepalive ppp ipcp ip-override ppp username user@isp ppp password isppasswd ip unnumbered lo ip tcp adjust-mss pmtu ! interface lo ip address 10.0.0.1/32 ! interface vap1.0 ip address 192.168.10.1/24 ! interface eth1 ip address 192.168.20.1/24 ! zone private network lan1 ip subnet 192.168.10.0/24 network lan2 ip subnet 192.168.20.0/24 host dns ip address 192.168.20.4 host smtp ip address 192.168.20.3 host web ip address 192.168.20.2 ! zone public network wan ip subnet 0.0.0.0/0 interface ppp0 host ppp0 ip address 10.0.0.1 ! zone global network ip8 ip subnet 10.0.0.0/29 host dns ip address 10.0.0.4 host smtp ip address 10.0.0.3 host web ip address 10.0.0.2 ! application dns_tcp protocol tcp sport any dport 53 ! firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit any from private to global rule 40 permit any from global to global rule 50 permit any from global to public rule 60 permit http from public to private.lan2.web rule 70 permit smtp from public to private.lan2.smtp rule 80 permit dns from public to private.lan2.dns rule 90 permit dns_tcp from public to private.lan.dns protect ! nat rule 10 masq any from private to public with src public.wan.ppp0 rule 20 portfwd http from public to global.ip8.web with dst private.lan2.web rule 30 portfwd smtp from public to global.ip8.smtp with dst private.lan2.smtp rule 40 portfwd dns from public to global.ip8.dns with dst private.lan2.dns rule 50 portfwd dns_tcp from public to global.ip8.dns with dst private.lan2.dns enable ! ip route 0.0.0.0/0 ppp0 ! log buffered level informational ! end
(C) 2023 アライドテレシスホールディングス株式会社
PN: 613-003212 Rev.B