?Z???^?? | 200.200.200.1 |
???_1?? | ?w??Ȃ? |
???_2?? | ?w??Ȃ? |
IP遊雅堂 仮想通貨c?̑ΏۂƂ??钆?p?p?P?b?g |
192.168.0.0/22 ?? 192.168.2.0/24 192.168.0.0/22 ?? 192.168.3.0/24 |
IP遊雅堂 仮想通貨c Pha遊雅堂 仮想通貨1?|???V?[ |
???[?h ??? Aggressive???[?h ?F?ؕ??? ??? ???O???L?????? ?Í??????? ??? 3DES ?n?b?V?????? ??? SHA Diffie-Hellman ??? G遊雅堂 仮想通貨p 2 |
IP遊雅堂 仮想通貨c Pha遊雅堂 仮想通貨2?|???V?[ |
?Í??????? ??? 3DES ?n?b?V?????? ??? SHA IP遊雅堂 仮想通貨c SA?m???_?@ ??? ???SA???m?????? |
?ݒ??? | ?ݒ荀?? | ?ݒ?l | ???l | |||
---|---|---|---|---|---|---|
?Z???^ | ???_1 | ???_2 | ||||
?C???^?t?F?[?X?ݒ? |
LAN???ݒ? |
LAN??IP?A?h???X | 192.168.1.254 | 192.168.2.254 | 192.168.3.254 | |
?T?u?l?b?g?}?X?N | 255.255.255.0 | 255.255.255.0 | 255.255.255.0 | |||
DHCP?T?[?o?@?\ | ?g?p???Ȃ? | ?g?p???Ȃ? | ?g?p???Ȃ? | |||
?y???M?z | ?y???M?z | ?y???M?z | ???M?{?^?????????܂? | |||
EWAN1 PPPoE?ڑ? |
PPPoE1 ???? |
FLETS | FLETS | FLETS | ?킩??₷?????? | |
???[?UID | abc012@***.***.ne.jp | abc345@***.***.ne.jp | abc678@***.***.ne.jp | ID?͈??ł? | ||
?p?X???[?h | xxxyyyzzz | zzzyyyxxx | yyyxxxzzz | ?p?X???[?h?͈??ł? | ||
?ڑ??^?C?v | ?[???^ | ?[???^ | ?[???^ | |||
IP?A?h???X | 200.200.200.1 | (?ݒ?s?v) | (?ݒ?s?v) | |||
?y???M?z | ?y???M?z | ?y???M?z | ???M?{?^?????????܂? | |||
???[?e?B???O?v???g?R???̐ݒ? |
?X?^?e?B?b?N???[?e?B???O | ?ʐM??w?? | 0.0.0.0/0 | 0.0.0.0/0 | 0.0.0.0/0 | |
???p??w?? ?C???^?t?F?[?X?w?? |
PPPOE1 | PPPOE1 | PPPOE1 | |||
?y???M?z | ?y???M?z | ?y???M?z | ???M?{?^?????????܂? | |||
NAT?@?\ | PPPoE1 NAT+?̓o?^ |
LAN??̒[???w?? | 192.168.1.0/24 | 192.168.2.0/24 | 192.168.3.0/24 | NAT?ϊ??O?̃A?h???X |
?y???M?z | ?y???M?z | ?y???M?z | ???M?{?^?????????܂? | |||
VPN?̐ݒ? | VPN???샂?[?h | 遊雅堂 仮想通貨 | 遊雅堂 仮想通貨 | 遊雅堂 仮想通貨 | ||
VPN?ʐM???쒆?̃C?x???g???O | ?c?? | ?c?? | ?c?? | |||
?y???M?z | ?y???M?z | ?y???M?z | ???M?{?^?????????܂? | |||
VPN?̐ݒ? | VPN?Ώۃp?P?b?g?̓o?^ | ?D??x | 1 | 1 | ||
????w?? |
IP?A?h???X?w?? 192.168.2.0/24 |
IP?A?h???X?w?? 192.168.0.0/22?@?? |
?? 192.168.0.0/22 ?ɂȂ??Ă???Ƃ??낪?|?C???g?ł??B | |||
???M???w?? |
IP?A?h???X?w?? 192.168.0.0/22?@?? |
IP?A?h???X?w?? 192.168.2.0/24 |
?? 192.168.0.0/22 ?ɂȂ??Ă???Ƃ??낪?|?C???g?ł??B | |||
?v???g?R?? | IP | IP | ||||
IP遊雅堂 仮想通貨c?????^?C?v | IP遊雅堂 仮想通貨c???????Ē??p | IP遊雅堂 仮想通貨c???????Ē??p | ||||
?y???M?z | ???M?{?^?????????܂? | |||||
?D??x | 2 | 1 | ||||
????w?? |
IP?A?h???X?w?? 192.168.3.0/24 |
IP?A?h???X?w?? 192.168.0.0/22?@?? |
?? 192.168.0.0/22 ?ɂȂ??Ă???Ƃ??낪?|?C???g?ł??B | |||
???M???w?? |
IP?A?h???X?w?? 192.168.0.0/22?@?? |
IP?A?h???X?w?? 192.168.3.0/24 |
?? 192.168.0.0/22 ?ɂȂ??Ă???Ƃ??낪?|?C???g?ł??B | |||
?v???g?R?? | IP | IP | ||||
IP遊雅堂 仮想通貨c?????^?C?v | IP遊雅堂 仮想通貨c???????Ē??p | IP遊雅堂 仮想通貨c???????Ē??p | ||||
?y???M?z | ?y???M?z | ???M?{?^?????????܂? | ||||
?D??x | 64 | 64 | 64 | |||
????w?? | ???ׂ? | ???ׂ? | ???ׂ? | |||
???M???w?? | ???ׂ? | ???ׂ? | ???ׂ? | |||
?v???g?R?? | IP | IP | IP | |||
IP遊雅堂 仮想通貨c?????^?C?v | IP遊雅堂 仮想通貨c???????Ȃ??Œ??p | IP遊雅堂 仮想通貨c???????Ȃ??Œ??p | IP遊雅堂 仮想通貨c???????Ȃ??Œ??p | |||
?y???M?z | ?y???M?z | ?y???M?z | ???M?{?^?????????܂? | |||
?Í????|???V?[?̓o?^ | ???O | P2-POLICY | P2-POLICY | P2-POLICY | ||
?Í??A???S???Y?? | 3DES | 3DES | 3DES | |||
?F?A???S???Y?? | HMAC-SHA | HMAC-SHA | HMAC-SHA | |||
?y???M?z | ?y???M?z | ?y???M?z | ???M?{?^?????????܂? | |||
IKE?|???V?[?̓o?^ | ID | 1 | 1 | |||
IKE?|???V?[?F?A???S???Y?? | Pre-shared Key(?g???F?Ȃ?) | Pre-shared Key(?g???F?Ȃ?) | ||||
?Í????A???S???Y?? | 3des | 3des | ||||
Diffie-Hellman G遊雅堂 仮想通貨p | 2 | 2 | ||||
?n?b?V???A???S???Y?? | sha | sha | ||||
FQDN?^?C?v | U遊雅堂 仮想通貨rFQDN | U遊雅堂 仮想通貨rFQDN | ||||
???f?[?^ |
?A?X?L?[ 遊雅堂 仮想通貨CRET-VPN1 |
?A?X?L?[ 遊雅堂 仮想通貨CRET-VPN1 |
||||
IKE SA?l?S?V?G?[?V???????[?h | Aggressive | Aggressive | ||||
???g?̖??O | (?ݒ?s?v) | kyoten1 | ||||
VPN?s?A??IP?A?h???X | (?ݒ?s?v) | 200.200.200.1 | ||||
VPN?s?A?̖??O | kyoten1 | (?ݒ?s?v) | ||||
?y???M?z | ???M?{?^?????????܂? | |||||
ID | 2 | 1 | ||||
IKE?|???V?[?F?A???S???Y?? | Pre-shared Key(?g???F?Ȃ?) | Pre-shared Key(?g???F?Ȃ?) | ||||
?Í????A???S???Y?? | 3des | 3des | ||||
Diffie-Hellman G遊雅堂 仮想通貨p | 2 | 2 | ||||
?n?b?V???A???S???Y?? | sha | sha | ||||
FQDN?^?C?v | U遊雅堂 仮想通貨rFQDN | U遊雅堂 仮想通貨rFQDN | ||||
???f?[?^ |
?A?X?L?[ 遊雅堂 仮想通貨CRET-VPN2 |
?A?X?L?[ 遊雅堂 仮想通貨CRET-VPN2 |
||||
IKE SA?l?S?V?G?[?V???????[?h | Aggressive | Aggressive | ||||
???g?̖??O | (?ݒ?s?v) | kyoten2 | ||||
VPN?s?A??IP?A?h???X | (?ݒ?s?v) | 200.200.200.1 | ||||
VPN?s?A?̖??O | kyoten2 | (?ݒ?s?v) | ||||
?y???M?z | ?y???M?z | ???M?{?^?????????܂? | ||||
MAP?̓o?^ | MAP?? | KYOTEN1 | CENTER | |||
VPN?Ώۃp?P?b?g?D??x | 1 | 1 | ||||
VPN?s?A??IP?A?h???X | (?ݒ?s?v) | 200.200.200.1 | ||||
VPN?s?A?̃z?X?g?? | kyoten1 | (?ݒ?s?v) | ||||
?Í????|???V?[ | P2-POLICY | P2-POLICY | ||||
IP遊雅堂 仮想通貨c SA?m???_?@ | (?ݒ?s?v) | ???SA???m?????? | ||||
?y???M?z | ???M?{?^?????????܂? | |||||
MAP?? | KYOTEN2 | CENTER | ||||
VPN?Ώۃp?P?b?g?D??x | 2 | 1 | ||||
VPN?s?A??IP?A?h???X | (?ݒ?s?v) | 200.200.200.1 | ||||
VPN?s?A?̃z?X?g?? | kyoten2 | (?ݒ?s?v) | ||||
?Í????|???V?[ | P2-POLICY | P2-POLICY | ||||
IP遊雅堂 仮想通貨c SA?m???_?@ | (?ݒ?s?v) | ???SA???m?????? | ||||
?y???M?z | ?y???M?z | ???M?{?^?????????܂? | ||||
?C???^?t?F?[?X??MAP?o?^ PPPoE1??MAP?o?^ |
MAP?? | KYOTEN1 | CENTER | CENTER | ||
KYOTEN2 | ||||||
?y???M?z | ?y???M?z | ?y???M?z | ||||
???u?̍ċN?? | ???u???ċN?????? | ?y???M?z | ?y???M?z | ?y???M?z | ?? |
?Z???^
! ! ! ???????[?U???[?h?Ɉڍs???܂??B ! 遊雅堂 仮想通貨ter enable Enter password: super ???p?X???[?h????͂??܂??B?i???ۂ͕\??????Ȃ??j 遊雅堂 仮想通貨ter# ! ! ! ??{?ݒ胂?[?h?Ɉڍs???܂??B ! 遊雅堂 仮想通貨ter# c遊雅堂 仮想通貨figure terminal Router(c遊雅堂 仮想通貨fig)# ! ! ! LAN??IP?A?h???X??ݒ肵?܂??B ! Router(c遊雅堂 仮想通貨fig)# interface lan 1 Router(c遊雅堂 仮想通貨fig-if lan 1)# ip address 192.168.1.254 255.255.255.0 Router(c遊雅堂 仮想通貨fig-if lan 1)# exit ! ! ! PPPoE1?C???^?t?F?[?X?ݒ胂?[?h?Ɉڍs???܂??B ! Router(c遊雅堂 仮想通貨fig)# interface pppoe 1 Router(c遊雅堂 仮想通貨fig-if pppoe 1)# ! ! ! PPPoE?̊e??ݒ?????܂??B ! Router(c遊雅堂 仮想通貨fig-if pppoe 1)# pppoe 遊雅堂 仮想通貨rver FLETS Router(c遊雅堂 仮想通貨fig-if pppoe 1)# pppoe ac遊雅堂 仮想通貨unt abc012@***.***.ne.jp xxxyyyzzz Router(c遊雅堂 仮想通貨fig-if pppoe 1)# pppoe type host ???P Router(c遊雅堂 仮想通貨fig-if pppoe 1)# ip address 200.200.200.1?@???Q ! ! ! NAT+?̐ݒ?????܂??B ! Router(c遊雅堂 仮想通貨fig-if pppoe 1)# ip nat inside source list 1 interface Router(c遊雅堂 仮想通貨fig-if pppoe 1)# exit ! ! ! access-list ?ɁA?ϊ??O?A?h???X?iLAN???A?h???X?j??o?^???܂??B ! Router(c遊雅堂 仮想通貨fig)# access-list 1 permit 192.168.1.0 0.0.0.255 ! ! ! ?f?t?H???g???[?g??PPPoE1?ɐݒ肵?܂??B ! Router(c遊雅堂 仮想通貨fig)# ip 遊雅堂 仮想通貨te 0.0.0.0 0.0.0.0 pppoe 1 ! ! ! VPN?@?\??L???ɂ??܂??B ! Router(c遊雅堂 仮想通貨fig)# vpn enable ! ! ! VPN?ʐM???쒆?̏ڍׂȃ??O???c???ݒ?ɂ??܂??B ! Router(c遊雅堂 仮想通貨fig)# vpnlog enable ! ! ! Phase1?|???V?[?i???_?P?p?j?̐ݒ???s?Ȃ??܂??B ! Router(c遊雅堂 仮想通貨fig)# crypto isakmp policy 1 Router(c遊雅堂 仮想通貨fig-isakmp)# negotiati遊雅堂 仮想通貨-mode aggressive Router(c遊雅堂 仮想通貨fig-isakmp)# authenticati遊雅堂 仮想通貨 prekey Router(c遊雅堂 仮想通貨fig-isakmp)# encrypti遊雅堂 仮想通貨 3des Router(c遊雅堂 仮想通貨fig-isakmp)# g遊雅堂 仮想通貨p 2 Router(c遊雅堂 仮想通貨fig-isakmp)# hash sha Router(c遊雅堂 仮想通貨fig-isakmp)# key ascii 遊雅堂 仮想通貨CRET-VPN1 Router(c遊雅堂 仮想通貨fig-isakmp)# peer-identity host kyoten1 Router(c遊雅堂 仮想通貨fig-isakmp)# idtype-pre u遊雅堂 仮想通貨rfqdn Router(c遊雅堂 仮想通貨fig-isakmp)# exit ! ! ! Phase1?|???V?[?i???_?Q?p?j?̐ݒ???s?Ȃ??܂??B ! Router(c遊雅堂 仮想通貨fig)# crypto isakmp policy 2 Router(c遊雅堂 仮想通貨fig-isakmp)# negotiati遊雅堂 仮想通貨-mode aggressive Router(c遊雅堂 仮想通貨fig-isakmp)# authenticati遊雅堂 仮想通貨 prekey Router(c遊雅堂 仮想通貨fig-isakmp)# encrypti遊雅堂 仮想通貨 3des Router(c遊雅堂 仮想通貨fig-isakmp)# g遊雅堂 仮想通貨p 2 Router(c遊雅堂 仮想通貨fig-isakmp)# hash sha Router(c遊雅堂 仮想通貨fig-isakmp)# key ascii 遊雅堂 仮想通貨CRET-VPN2 Router(c遊雅堂 仮想通貨fig-isakmp)# peer-identity host kyoten2 Router(c遊雅堂 仮想通貨fig-isakmp)# idtype-pre u遊雅堂 仮想通貨rfqdn Router(c遊雅堂 仮想通貨fig-isakmp)# exit ! ! ! Phase2?|???V?[?̐ݒ???s?Ȃ??܂??B ! Router(c遊雅堂 仮想通貨fig)# ip遊雅堂 仮想通貨c transform-遊雅堂 仮想通貨t P2-POLICY esp-3des esp-sha-hmac ! ! ! VPN?Z???N?^?i???_?P?p?A???_?Q?p?j?̐ݒ???s?Ȃ??܂??B ! VPN?Z???N?^?̑??M???A?h???X???A192.168.0.0/22?ɂȂ??Ă???Ƃ??낪?|?C???g?ł??B???R ! Router(c遊雅堂 仮想通貨fig)# ip遊雅堂 仮想通貨c access-list 1 ip遊雅堂 仮想通貨c ip 192.168.0.0 0.0.3.255 192.168.2.0 0.0.0.255 Router(c遊雅堂 仮想通貨fig)# ip遊雅堂 仮想通貨c access-list 2 ip遊雅堂 仮想通貨c ip 192.168.0.0 0.0.3.255 192.168.3.0 0.0.0.255 Router(c遊雅堂 仮想通貨fig)# ip遊雅堂 仮想通貨c access-list 64 bypass ip any any Router(c遊雅堂 仮想通貨fig)# crypto map KYOTEN1 1 Router(c遊雅堂 仮想通貨fig-crypto-map)# match address 1 Router(c遊雅堂 仮想通貨fig-crypto-map)# 遊雅堂 仮想通貨t peer host kyoten1 Router(c遊雅堂 仮想通貨fig-crypto-map)# 遊雅堂 仮想通貨t transform-遊雅堂 仮想通貨t P2-POLICY Router(c遊雅堂 仮想通貨fig-crypto-map)# exit Router(c遊雅堂 仮想通貨fig)# crypto map KYOTEN2 2 Router(c遊雅堂 仮想通貨fig-crypto-map)# match address 2 Router(c遊雅堂 仮想通貨fig-crypto-map)# 遊雅堂 仮想通貨t peer host kyoten2 Router(c遊雅堂 仮想通貨fig-crypto-map)# 遊雅堂 仮想通貨t transform-遊雅堂 仮想通貨t P2-POLICY Router(c遊雅堂 仮想通貨fig-crypto-map)# exit Router(c遊雅堂 仮想通貨fig)# interface pppoe 1 Router(c遊雅堂 仮想通貨fig-if pppoe 1)# crypto map KYOTEN1 Router(c遊雅堂 仮想通貨fig-if pppoe 1)# crypto map KYOTEN2 Router(c遊雅堂 仮想通貨fig-if pppoe 1)# exit ! ! ! ???????[?U???[?h?ɖ߂?܂??B ! Router(c遊雅堂 仮想通貨fig)# end ! ! ! ?ݒ??ۑ????܂??B ! 遊雅堂 仮想通貨ter# save SIDE-*.cfg ??*?ɂ́A?ۑ????????ʂɉ????āAA?EB?̂ǂ??炩?????? % saving working-c遊雅堂 仮想通貨fig % finished saving Router# ! ! ! ?ݒ??L???ɂ??邽?߂ɍċN?????܂??B ! Router# re遊雅堂 仮想通貨t Are you OK to 遊雅堂 仮想通貨ld start?(y/n) y
???P | ?F | OCN ADSL?A?N?Z?X?@IP8/IP16?u?t???b?c?v?v?????̂悤?ȕ????̃A?h???X?????蓖?Ă???_??̏ꍇ?́A"pppoe type lan"?Ɛݒ肵?܂??B |
???Q | ?F | OCN ADSL?A?N?Z?X?@IP8/IP16?u?t???b?c?v?v?????̂悤?ȕ????̃A?h???X?????蓖?Ă???_??̏ꍇ?́A?w?肳?ꂽIP?A?h???X??+1?????A?h???X??ݒ肵?܂??B?Ⴆ?A200.200.200.48/29 ?????蓖?Ă?ꂽ?ꍇ?́A200.200.200.49??ݒ肵?܂??B |
???R | ?F | ?{???Ȃ???_1??????ip遊雅堂 仮想通貨c access-list??
|
! ! ! ???????[?U???[?h?Ɉڍs???܂??B ! 遊雅堂 仮想通貨ter enable Enter password: super ???p?X???[?h????͂??܂??B?i???ۂ͕\??????Ȃ??j 遊雅堂 仮想通貨ter# ! ! ! ??{?ݒ胂?[?h?Ɉڍs???܂??B ! 遊雅堂 仮想通貨ter# c遊雅堂 仮想通貨figure terminal Router(c遊雅堂 仮想通貨fig)# ! ! ! LAN ?? IP ?A?h???X??ݒ肵?܂??B ! Router(c遊雅堂 仮想通貨fig)# interface lan 1 Router(c遊雅堂 仮想通貨fig-if lan 1)# ip address 192.168.2.254 255.255.255.0 Router(c遊雅堂 仮想通貨fig-if lan 1)# exit ! ! ! PPPoE1?C???^?t?F?[?X?ݒ胂?[?h?Ɉڍs???܂??B ! Router(c遊雅堂 仮想通貨fig)# interface pppoe 1 Router(c遊雅堂 仮想通貨fig-if pppoe 1)# ! ! ! PPPoE?̊e??ݒ?????܂??B ! Router(c遊雅堂 仮想通貨fig-if pppoe 1)# pppoe 遊雅堂 仮想通貨rver FLETS Router(c遊雅堂 仮想通貨fig-if pppoe 1)# pppoe ac遊雅堂 仮想通貨unt abc345@***.***.ne.jp zzzyyyxxx Router(c遊雅堂 仮想通貨fig-if pppoe 1)# pppoe type host ! ! ! NAT+?̐ݒ?????܂??B ! Router(c遊雅堂 仮想通貨fig-if pppoe 1)# ip nat inside source list 1 interface Router(c遊雅堂 仮想通貨fig-if pppoe 1)# exit ! ! ! access-list ?ɁA?ϊ??O?A?h???X?iLAN???A?h???X?j??o?^???܂??B ! Router(c遊雅堂 仮想通貨fig)# access-list 1 permit 192.168.2.0 0.0.0.255 ! ! ! ?f?t?H???g???[?g??PPPoE1?ɐݒ肵?܂??B ! Router(c遊雅堂 仮想通貨fig)# ip 遊雅堂 仮想通貨te 0.0.0.0 0.0.0.0 pppoe 1 ! ! ! VPN?@?\??L???ɂ??܂??B ! Router(c遊雅堂 仮想通貨fig)# vpn enable ! ! ! VPN?ʐM???쒆?̏ڍׂȃ??O???c???ݒ?ɂ??܂??B ! Router(c遊雅堂 仮想通貨fig)# vpnlog enable ! ! ! Phase1?|???V?[?̐ݒ???s?Ȃ??܂??B ! Router(c遊雅堂 仮想通貨fig)# crypto isakmp policy 1 Router(c遊雅堂 仮想通貨fig-isakmp)# negotiati遊雅堂 仮想通貨-mode aggressive Router(c遊雅堂 仮想通貨fig-isakmp)# authenticati遊雅堂 仮想通貨 prekey Router(c遊雅堂 仮想通貨fig-isakmp)# encrypti遊雅堂 仮想通貨 3des Router(c遊雅堂 仮想通貨fig-isakmp)# g遊雅堂 仮想通貨p 2 Router(c遊雅堂 仮想通貨fig-isakmp)# hash sha Router(c遊雅堂 仮想通貨fig-isakmp)# key ascii 遊雅堂 仮想通貨CRET-VPN1 Router(c遊雅堂 仮想通貨fig-isakmp)# my-identity kyoten1 Router(c遊雅堂 仮想通貨fig-isakmp)# peer-identity address 200.200.200.1 Router(c遊雅堂 仮想通貨fig-isakmp)# idtype-pre u遊雅堂 仮想通貨rfqdn Router(c遊雅堂 仮想通貨fig-isakmp)# exit ! ! ! Phase2?|???V?[?̐ݒ???s?Ȃ??܂??B ! Router(c遊雅堂 仮想通貨fig)# ip遊雅堂 仮想通貨c transform-遊雅堂 仮想通貨t P2-POLICY esp-3des esp-sha-hmac ! ! ! VPN?Z???N?^?̐ݒ???s?Ȃ??܂??B ! VPN?Z???N?^?̈??悪?A192.168.0.0/22?ɂȂ??Ă???Ƃ??낪?|?C???g?ł??B ! Router(c遊雅堂 仮想通貨fig)# ip遊雅堂 仮想通貨c access-list 1 ip遊雅堂 仮想通貨c ip 192.168.2.0 0.0.0.255 192.168.0.0 0.0.3.255 Router(c遊雅堂 仮想通貨fig)# ip遊雅堂 仮想通貨c access-list 64 bypass ip any any Router(c遊雅堂 仮想通貨fig)# crypto map CENTER 1 Router(c遊雅堂 仮想通貨fig-crypto-map)# match address 1 Router(c遊雅堂 仮想通貨fig-crypto-map)# 遊雅堂 仮想通貨t peer address 200.200.200.1 Router(c遊雅堂 仮想通貨fig-crypto-map)# 遊雅堂 仮想通貨t transform-遊雅堂 仮想通貨t P2-POLICY Router(c遊雅堂 仮想通貨fig-crypto-map)# set security-associati遊雅堂 仮想通貨 always-up ! ???SA???m?? Router(c遊雅堂 仮想通貨fig-crypto-map)# exit Router(c遊雅堂 仮想通貨fig)# interface pppoe 1 Router(c遊雅堂 仮想通貨fig-if pppoe 1)# crypto map CENTER Router(c遊雅堂 仮想通貨fig-if pppoe 1)# exit ! ! ! ???????[?U???[?h?ɖ߂?܂??B ! Router(c遊雅堂 仮想通貨fig)# end ! ! ! ?ݒ??ۑ????܂??B ! 遊雅堂 仮想通貨ter# save SIDE-*.cfg ??*?ɂ́A?ۑ????????ʂɉ????āAA?EB?̂ǂ??炩?????? % saving working-c遊雅堂 仮想通貨fig % finished saving Router# ! ! ! ?ݒ??L???ɂ??邽?߂ɍċN?????܂??B ! Router# re遊雅堂 仮想通貨t Are you OK to 遊雅堂 仮想通貨ld start?(y/n) y
! ! ! ???????[?U???[?h?Ɉڍs???܂??B ! 遊雅堂 仮想通貨ter enable Enter password: super ???p?X???[?h????͂??܂??B?i???ۂ͕\??????Ȃ??j 遊雅堂 仮想通貨ter# ! ! ! ??{?ݒ胂?[?h?Ɉڍs???܂??B ! 遊雅堂 仮想通貨ter# c遊雅堂 仮想通貨figure terminal Router(c遊雅堂 仮想通貨fig)# ! ! ! LAN ?? IP ?A?h???X??ݒ肵?܂??B ! Router(c遊雅堂 仮想通貨fig)# interface lan 1 Router(c遊雅堂 仮想通貨fig-if lan 1)# ip address 192.168.3.254 255.255.255.0 Router(c遊雅堂 仮想通貨fig-if lan 1)# exit ! ! ! PPPoE1?C???^?t?F?[?X?ݒ胂?[?h?Ɉڍs???܂??B ! Router(c遊雅堂 仮想通貨fig)# interface pppoe 1 Router(c遊雅堂 仮想通貨fig-if pppoe 1)# ! ! ! PPPoE?̊e??ݒ?????܂??B ! Router(c遊雅堂 仮想通貨fig-if pppoe 1)# pppoe 遊雅堂 仮想通貨rver FLETS Router(c遊雅堂 仮想通貨fig-if pppoe 1)# pppoe ac遊雅堂 仮想通貨unt abc678@***.***.ne.jp yyyxxxzzz Router(c遊雅堂 仮想通貨fig-if pppoe 1)# pppoe type host ! ! ! NAT+?̐ݒ?????܂??B ! Router(c遊雅堂 仮想通貨fig-if pppoe 1)# ip nat inside source list 1 interface Router(c遊雅堂 仮想通貨fig-if pppoe 1)# exit ! ! ! access-list ?ɁA?ϊ??O?A?h???X?iLAN???A?h???X?j??o?^???܂??B ! Router(c遊雅堂 仮想通貨fig)# access-list 1 permit 192.168.3.0 0.0.0.255 ! ! ! ?f?t?H???g???[?g??PPPoE1?ɐݒ肵?܂??B ! Router(c遊雅堂 仮想通貨fig)# ip 遊雅堂 仮想通貨te 0.0.0.0 0.0.0.0 pppoe 1 ! ! ! VPN?@?\??L???ɂ??܂??B ! Router(c遊雅堂 仮想通貨fig)# vpn enable ! ! ! VPN?ʐM???쒆?̏ڍׂȃ??O???c???ݒ?ɂ??܂??B ! Router(c遊雅堂 仮想通貨fig)# vpnlog enable ! ! ! Phase1?|???V?[?̐ݒ???s?Ȃ??܂??B ! Router(c遊雅堂 仮想通貨fig)# crypto isakmp policy 1 Router(c遊雅堂 仮想通貨fig-isakmp)# negotiati遊雅堂 仮想通貨-mode aggressive Router(c遊雅堂 仮想通貨fig-isakmp)# authenticati遊雅堂 仮想通貨 prekey Router(c遊雅堂 仮想通貨fig-isakmp)# encrypti遊雅堂 仮想通貨 3des Router(c遊雅堂 仮想通貨fig-isakmp)# g遊雅堂 仮想通貨p 2 Router(c遊雅堂 仮想通貨fig-isakmp)# hash sha Router(c遊雅堂 仮想通貨fig-isakmp)# key ascii 遊雅堂 仮想通貨CRET-VPN2 Router(c遊雅堂 仮想通貨fig-isakmp)# my-identity kyoten2 Router(c遊雅堂 仮想通貨fig-isakmp)# peer-identity address 200.200.200.1 Router(c遊雅堂 仮想通貨fig-isakmp)# idtype-pre u遊雅堂 仮想通貨rfqdn Router(c遊雅堂 仮想通貨fig-isakmp)# exit ! ! ! Phase2?|???V?[?̐ݒ???s?Ȃ??܂??B ! >Router(c遊雅堂 仮想通貨fig)# ip遊雅堂 仮想通貨c transform-遊雅堂 仮想通貨t P2-POLICY esp-3des esp-sha-hmac ! ! ! VPN?Z???N?^?̐ݒ???s?Ȃ??܂??B ! VPN?Z???N?^?̈??悪?A192.168.0.0/22?ɂȂ??Ă???Ƃ??낪?|?C???g?ł??B ! Router(c遊雅堂 仮想通貨fig)# ip遊雅堂 仮想通貨c access-list 1 ip遊雅堂 仮想通貨c ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.3.255 Router(c遊雅堂 仮想通貨fig)# ip遊雅堂 仮想通貨c access-list 64 bypass ip any any Router(c遊雅堂 仮想通貨fig)# crypto map CENTER 1 Router(c遊雅堂 仮想通貨fig-crypto-map)# match address 1 Router(c遊雅堂 仮想通貨fig-crypto-map)# 遊雅堂 仮想通貨t peer address 200.200.200.1 Router(c遊雅堂 仮想通貨fig-crypto-map)# 遊雅堂 仮想通貨t transform-遊雅堂 仮想通貨t P2-POLICY Router(c遊雅堂 仮想通貨fig-crypto-map)# set security-associati遊雅堂 仮想通貨 always-up ! ???SA???m?? Router(c遊雅堂 仮想通貨fig-crypto-map)# exit Router(c遊雅堂 仮想通貨fig)# interface pppoe 1 Router(c遊雅堂 仮想通貨fig-if pppoe 1)# crypto map CENTER Router(c遊雅堂 仮想通貨fig-if pppoe 1)# exit ! ! ! ???????[?U???[?h?ɖ߂?܂??B ! Router(c遊雅堂 仮想通貨fig)# end ! ! ! ?ݒ??ۑ????܂??B ! 遊雅堂 仮想通貨ter# save SIDE-*.cfg ??*?ɂ́A?ۑ????????ʂɉ????āAA?EB?̂ǂ??炩?????? % saving working-c遊雅堂 仮想通貨fig % finished saving Router# ! ! ! ?ݒ??L???ɂ??邽?߂ɍċN?????܂??B ! Router# re遊雅堂 仮想通貨t Are you OK to 遊雅堂 仮想通貨ld start?(y/n) y