## CentreCOM AR415S 設定例集 2.9 ## 109 IPルートフィルター ## ルーターAのコンフィグ CREATE PPP=0 OVER=eth0-ANY SET PPP=0 OVER=eth0-ANY BAP=OFF IPREQUEST=OFF USER=user@ispA PASSWORD=isppasswdA LQR=OFF ECHO=ON ENABLE IP ADD IP INT=ppp0 IP=4.4.4.1 MASK=255.255.255.255 ADD IP INT=vlan1 IP=192.168.1.100 MASK=255.255.255.0 ADD IP ROUTE=0.0.0.0 INT=ppp0 NEXTHOP=0.0.0.0 ENABLE L2TP ENABLE L2TP SERVER=BOTH SET L2TP PASSWORD=l2tpA ADD L2TP CALL=remote IP=12.34.56.78 TYPE=VIRTUAL REMOTE=remote PRECEDENCE=IN PASSWORD=l2tpB CREATE PPP=1 OVER=TNL-remote IDLE=ON BAP=OFF LQR=OFF ADD IP INT=ppp1 IP=1.1.1.1 MASK=255.255.255.252 ENABLE FIREWALL CREATE FIREWALL POLICY=net ENABLE FIREWALL POLICY=net ICMP_F=PING,UNREACH DISABLE FIREWALL POLICY=net IDENTPROXY ADD FIREWALL POLICY=net INT=ppp0 TYPE=PUBLIC ADD FIREWALL POLICY=net INT=vlan1 TYPE=PRIVATE ADD FIREWALL POLICY=net INT=ppp1 TYPE=PRIVATE ADD FIREWALL POLICY=net NAT=ENHANCED INT=vlan1 GBLINT=ppp0 GBLIP=4.4.4.1 ADD FIREWALL POLICY=net RULE=1 AC=ALLOW INT=ppp0 PROTO=UDP GBLPO=1701 GBLIP=4.4.4.1 PO=1701 IP=4.4.4.1 ADD IP RIP INT=ppp1 SEND=RIP2 RECEIVE=RIP2 ADD OSPF AREA=BACKBONE ADD OSPF RANGE=192.168.1.0 MASK=255.255.255.0 AREA=BACKBONE ADD OSPF INT=vlan1 AREA=BACKBONE SET OSPF ASEXTERNAL=ON RIP=BOTH ENABLE OSPF ADD IP ROUTE FILTER IP=192.168.100.* MASK=255.255.255.* AC=EXCLUDE DIR=RECEIVE INT=vlan1 PROTO=OSPF ADD IP ROUTE FILTER IP=*.*.*.* MASK=*.*.*.* AC=INCLUDE DIR=SEND INT=vlan1 PROTO=OSPF ADD IP ROUTE FILTER IP=*.*.*.* MASK=*.*.*.* AC=INCLUDE DIR=RECEIVE INT=vlan1 PROTO=OSPF ADD IP ROUTE FILTER IP=4.4.4.1 MASK=255.255.255.255 AC=EXCLUDE DIRECTION=SEND INT=ppp1 PROTOCOL=RIP ADD IP ROUTE FILTER IP=0.0.0.0 MASK=0.0.0.0 AC=EXCLUDE DIRECTION=SEND INT=ppp1 PROTOCOL=RIP ADD IP ROUTE FILTER IP=*.*.*.* MASK=*.*.*.* ACTION=INCLUDE INT=ppp1 PROTOCOL=RIP