[index] AT-NFV-APL Ver.1.8.1 リファレンスマニュアル
WAN側物理インターフェース | eth1 |
WAN側(eth1)IPv6アドレス | リンクローカルアドレス |
LAN側(eth0)IPv6アドレス | DHCPv6 PDで取得したIPv6プレフィックスにもとづいて設定 |
インターフェースID | ::1 |
固定IP用トンネル終端装置IPv6アドレス | 2001:db8:3c:10::1 |
IPv4グローバルアドレス | 203.0.113.1/32 |
アップデートサーバーのURL | https://example.com |
ユーザー名 | userA |
パスワード | passwdA |
Note(注1) 本設定例では例示用IPアドレス、URL等を使用しており、実際に設定する値とは異なります。実際の設定時には、ユーザー毎に通知される各種情報をご使用ください。
Note10ポート構成(eth1~eth10)のAT-NFV-APL-GTXを想定した例になっていますので、6ポート(eth1~eth6)構成のAT-NFV-APL-GTをご使用の場合は、使用するポートを適宜読み替えてください。
br0 | 192.168.10.254/24 |
eth1~eth9 | 1 | 1 |
eth10 |
インターフェース名 |
タイプ |
VLAN ID |
インターフェース |
|
eth0 | Virtual | 1 | - | 192.168.10.1/24 |
eth1 | Physical | - | eth10 | 未指定 |
?
」をCLIから入力するには、Ctrl/V
キーを入力してから ?
を入力してください。単に ?
を入力するとCLIヘルプが表示されてしまうためご注意ください。ddns-update-method V6UPDATE update-url https://example.com?user=<USERNAME>&pass=<PASSWORD> username userA password passwdA suppress-ipv4-updates
ddns enable
interface eth1 no ipv6 nd accept-ra-pinfo ipv6 dhcp client pd IPoE default-route-to-server
interface eth0 ipv6 ddns-update-method V6UPDATE ip address 192.168.10.1/24 no ipv6 nd suppress-ra ipv6 nd dns-server eth0 ipv6 address IPoE ::1/64
ipv6 forwarding
ip dhcp pool pool10 network 192.168.10.0 255.255.255.0 range 192.168.10.100 192.168.10.131 dns-server 192.168.10.1 default-router 192.168.10.1 lease 0 2 0
service dhcp-server
interface tunnel0 tunnel source eth0 tunnel destination 2001:db8:3c:10::1 tunnel mode ipv6 ip address 203.0.113.1/32 ip tcp adjust-mss pmtu
ip route 0.0.0.0/0 tunnel0
zone all network ipv4 ip subnet 0.0.0.0/0 network ipv6 ipv6 subnet ::/0
zone ipv4-internal network lan ip subnet 192.168.10.0/24
zone ipv4-internet network wan ip subnet 0.0.0.0/0 interface tunnel0 host nat ip address 203.0.113.1
zone ipv6-internal network lan ipv6 subnet ::/0 interface eth0 host eth0 ipv6 address dynamic interface eth0
zone ipv6-internet network wan ipv6 subnet ::/0 interface eth1 host eth1 ipv6 address dynamic interface eth1
application dhcpv4 protocol udp dport 67 to 68
application dhcpv6 protocol udp dport 546 to 547
application icmpv6 protocol ipv6-icmp
firewall rule 10 permit dhcpv4 from all.ipv4 to all.ipv4 rule 20 permit any from ipv4-internal to ipv4-internal rule 30 permit any from ipv4-internal to ipv4-internet rule 40 permit any from ipv4-internet.wan.nat to ipv4-internet rule 50 permit dhcpv6 from all.ipv6 to all.ipv6 rule 60 permit icmpv6 from all.ipv6 to all.ipv6 rule 70 permit any from ipv6-internal to ipv6-internal rule 80 permit any from ipv6-internal to ipv6-internal.lan.eth0 rule 90 permit any from ipv6-internal to ipv6-internet rule 100 permit any from ipv6-internal.lan.eth0 to ipv6-internal rule 110 permit any from ipv6-internal.lan.eth0 to ipv6-internet rule 120 permit any from ipv6-internet.wan.eth1 to ipv6-internet protect
nat rule 10 masq any from ipv4-internal to ipv4-internet enable
ip dns forwarding
end
copy running-config startup-config
」の書式で実行します。awplus# copy running-config startup-config ↓ Building configuration... [OK]
awplus# write memory ↓ Building configuration... [OK]
awplus(config)# log buffered level informational facility local5 ↓
awplus# show log | include Firewall ↓
! ddns-update-method V6UPDATE update-url https://example.com?user=<USERNAME>&pass=<PASSWORD> username userA password passwdA suppress-ipv4-updates ! ddns enable ! interface eth1 no ipv6 nd accept-ra-pinfo ipv6 dhcp client pd IPoE default-route-to-server ! interface eth0 ipv6 ddns-update-method V6UPDATE ip address 192.168.10.1/24 no ipv6 nd suppress-ra ipv6 nd dns-server eth0 ipv6 address IPoE ::1/64 ! ipv6 forwarding ! ip dhcp pool pool10 network 192.168.10.0 255.255.255.0 range 192.168.10.100 192.168.10.131 dns-server 192.168.10.1 default-router 192.168.10.1 lease 0 2 0 ! service dhcp-server ! interface tunnel0 tunnel source eth0 tunnel destination 2001:db8:3c:10::1 tunnel mode ipv6 ip address 203.0.113.1/32 ip tcp adjust-mss pmtu ! ip route 0.0.0.0/0 tunnel0 ! zone all network ipv4 ip subnet 0.0.0.0/0 network ipv6 ipv6 subnet ::/0 ! zone ipv4-internal network lan ip subnet 192.168.10.0/24 ! zone ipv4-internet network wan ip subnet 0.0.0.0/0 interface tunnel0 host nat ip address 203.0.113.1 ! zone ipv6-internal network lan ipv6 subnet ::/0 interface eth0 host eth0 ipv6 address dynamic interface eth0 ! zone ipv6-internet network wan ipv6 subnet ::/0 interface eth1 host eth1 ipv6 address dynamic interface eth1 ! application dhcpv4 protocol udp dport 67 to 68 ! application dhcpv6 protocol udp dport 546 to 547 ! application icmpv6 protocol ipv6-icmp ! firewall rule 10 permit dhcpv4 from all.ipv4 to all.ipv4 rule 20 permit any from ipv4-internal to ipv4-internal rule 30 permit any from ipv4-internal to ipv4-internet rule 40 permit any from ipv4-internet.wan.nat to ipv4-internet rule 50 permit dhcpv6 from all.ipv6 to all.ipv6 rule 60 permit icmpv6 from all.ipv6 to all.ipv6 rule 70 permit any from ipv6-internal to ipv6-internal rule 80 permit any from ipv6-internal to ipv6-internal.lan.eth0 rule 90 permit any from ipv6-internal to ipv6-internet rule 100 permit any from ipv6-internal.lan.eth0 to ipv6-internal rule 110 permit any from ipv6-internal.lan.eth0 to ipv6-internet rule 120 permit any from ipv6-internet.wan.eth1 to ipv6-internet protect ! nat rule 10 masq any from ipv4-internal to ipv4-internet enable ! ip dns forwarding ! end
(C) 2021 - 2023 アライドテレシスホールディングス株式会社
PN: 613-002993 Rev.H