遊雅堂登録方法 crypto isakmp policy 2

?É͓d?H?l?b?g???[?N?@??̑????u?????h?@?t?@?C?e???l?b?g

?ݒ??

4?D?Z???^F1000(2??e1???)?E???_F100(1??1???)??IPsec???ו??U???s??

?T?v

?⑫?E???ӓ_

???????

???_??F100??1??ŁAPPPoE?iIP?A?h???X?s??j??1?Z?b?V?????g?p???܂??B
?Z???^??F1000??2??ŋ@??璷?Ɖ???璷???s???A???ꂼ??PPPoE?iIP?A?h???X?Œ?j??1?Z?b?V?????g?p???܂??B
?Z???^??2???F1000??F100?ɒu???????Ă??^?p?ł??܂??B
IPsec?̓A?O???b?V?u???[?h?ł????A???_????????SA???m?????Ă???̂ŁA?Z???^???_?@?̒ʐM?ɂ??Ή??ł??܂??B
???_??F100?͐ݒ肳?ꂽ?䗦?ŕ??ו??U???s???܂??i2??VPN??Active-Active?ł??j?B???U?䗦?? 0 ?` 10 ?̊Ԃ́A?C?ӂ̐????l?Őݒ?ł??܂??i 0 ?? 10 ???ݒ?ł???̂́AF100??V01.10?ȍ~?AF1000??V01.03?ȍ~?̃t?@?[???E?F?A?ƂȂ?܂??j?B
10?F0 ?Ƃ????ꍇ?́A?ʏ펞 0 ???Ƀ??[?U?f?[?^?͗??ꂸ?AActive-Standby?ɂȂ?܂??ikeep alive??ICMP?p?P?b?g?͗???܂??j?B
?????VPN???s?ʂƂȂ????ꍇ?́A?c???VPN?őS?Ă̒ʐM???܂??Ȃ??܂??B
?܂??AVPN?̕?????͍Ăѐݒ肳?ꂽ?䗦?ŕ??ו??U???s???܂??B
???_??F100??VPN1?o?H?AVPN2?o?H???Ɍo?H?Ď????s???܂??B
?Z???^??F1000?͂??ꂼ??̌o?H???Ď????܂??i?o?H?Ď??ɂ?ICMP??keep alive???g?p???܂??j?B
VPN1?o?H?AVPN2?o?H?̐؂?ւ??́A???_???ł?F100???????I?ɍs???A?o?H??????̐؂?߂??????_??F100???????I?ɍs???܂??B
?o?H??Q???ɂ́Akeep alive?@?\?ɂ??ASA?????????܂??B???ו??U?\???̏ꍇ?A?C?j?V?G?[?^???ł?sa-up???[?g?@?\?iPhase2 SA?̊m?????_?@?Ƃ??āA???B?\?ƂȂ????o?H????o?^????@?\?j???g?????Ƃɂ??A???g?̃??[?e?B???O?e?[?u???𓮓I?ɏ????????܂??B
?Z???^??2???F1000?́Asa-up???[?g?@?\?œo?^???????[?g????LAN????RIP?ōL?????܂??B?Z???^???̌o?H????́A2???F1000????RIP???󂯂?L3SW???A???g???b?N?l?????Ƃɔ??f???邱?ƂɂȂ?܂??B???̗?̏ꍇ?AF1000-1????VPN1?o?H?̗D??x???????Ȃ?悤?ɂ??āARIP???L?????Ă??܂??B
?Z???^???Őݒ肵?Ă???g???l?????[?g?@?\?́A?Ό????u?̃s?A?ւ̃??[?g???AIKE?̃l?S???_?@?Ƃ??ēo?^????@?\?ł??B???̋@?\???g?????Ƃɂ??A???̗?̂悤?ɑΌ????u?̃s?A?̃A?h???X???s??̏ꍇ?ł??A?f?t?H???g???[?g??L3SW???Ɍ????邱?Ƃ??ł???悤?ɂȂ?܂??B???̋@?\?́A?A?O???b?V?u???[?h?̃??X?|???_???ł̂ݐݒ?\?ł??B
?????Q???̐؂?ւ??ɂ͕??ς?30?b?قǂ?????܂??ikeep alive?̑??M?Ԋu???????l??60?b?ɐݒ肳??Ă??邽?߁j?B
keep alive?Ɋւ???ݒ???ualive?v?R?}???h???Q?ƁB

?O?????

???ݒ??ł́A?ȉ??̃A?h???X?E????O??ɐ??????Ă??܂??B

?v???o?C?_??芄??U??ꂽ?A?h???X?i?A?h???X?͈??ł??j

?Z???^??F1000-1 PPPoE1	200.200.200.200
?Z???^??F1000-2 PPPoE1	100.100.100.100
???_?? PPPoE1	?A?h???X?s??

?ݒ??

IPsec?̑ΏۂƂ??钆?p?p?P?b?g	any ?? 172.16.0.0/16 ???Z???^??L3SW?̔w??̕ʃZ?O?????g?????VPN?\
IPsec Phase1?\|???V?[	???[?h ??? Aggressive???[?h ?F?ؕ??? ??? ???O???L?????? ?Í??????? ??? AES 128 Dif遊雅堂登録方法e-Hellman ??? Group 2 ?n?b?V?????? ??? SHA
IPsec Phase2?\|???V?[	?Í??????? ??? AES 128 ?n?b?V?????? ??? SHA
IPsec???ו??U?̔䗦 ?iVPN1?FVPN2?j	2?F1?@??1?@?@?i???_??F100?j
L3SW (192.168.3.254)	RIP(Ver.2)????M ??F100?AF1000??RIP??Ver.2???g?p(?????l)

?R?}???h?ݒ?̗?

?i!?̍s?̓R?????g?ł??B???ۂɓ??͂???K?v?͂???܂???B?j

???̐ݒ?𗘗p??????????

<pre>
!
interface lan 1
 ip address 172.16.0.1 255.255.0.0
 exit
!
interface pppoe 1
 pppoe server A-Provider
 pppoe ac遊雅堂 登録方法unt user@xxxx.ne.jp secret
 pppoe type host
 crypto map VPN1
 crypto map VPN2
exit
!
ip route 200.200.200.200 255.255.255.255 pppoe 1
ip route 100.100.100.100 255.255.255.255 pppoe 1
!
service dhcp-server
!
ip dhcp pool lan1
 default-router 0.0.0.0
exit
!
vpn enable
vpnlog enable
!
crypto isakmp policy 1
 authentication prekey
 encryption aes 128
 group 2
 hash sha
 keepalive icmp always-send
 keepalive-icmp peer-address 192.168.3.1
 keepalive-icmp source-interface lan 1
 keepalive-icmp multi-path interface pppoe 1
 key ascii furukawa
 my-identity kyoten1-1
 negotiation-mode aggressive
 peer-identity address 200.200.200.200
exit
!
crypto isakmp policy 2
 authentication prekey
 encryption aes 128
 group 2
 hash sha
 keepalive icmp always-send
 keepalive-icmp peer-address 192.168.3.20
 keepalive-icmp source-interface lan 1
 keepalive-icmp multi-path interface pppoe 1
 key ascii furukawa
 my-identity kyoten1-2
 negotiation-mode aggressive
 peer-identity address 100.100.100.100
exit
!
ipsec transform-set P2-POLICY esp-aes-128 esp-sha-hmac
ipsec access-list 10 ipsec ip 172.16.0.0 0.0.255.255 any
ipsec access-list 64 bypass ip any any
!
crypto map VPN1 1
 match address 10 multi-path balance 2
 set peer address 200.200.200.200
 set security-association always-up
 set transform-set P2-POLICY
 sa-up route interface pppoe 1 local-prot1
exit
!
crypto map VPN2 2
 match address 10 multi-path balance 1
 set peer address 100.100.100.100
 set security-association always-up
 set transform-set P2-POLICY
 sa-up route interface pppoe 1 local-prot2
exit
!
end
</pre>

???_?? 遊雅堂登録方法TELnet-F100 ?̐ݒ?

!
!
! ???????[?U???[?h?Ɉڍs???܂??B
!
遊雅堂 登録方法uter enable
Enter password: super ???p?X???[?h????͂??܂??B?i???ۂ͕\??????Ȃ??j

遊雅堂 登録方法uter#
!
!
! ??{?ݒ胂?[?h?Ɉڍs???܂??B
!
遊雅堂 登録方法uter# 遊雅堂 登録方法nfigure terminal
Router(遊雅堂 登録方法nfig)#
!
!
! LAN??IP?A?h???X??ݒ肵?܂??B
!
Router(遊雅堂 登録方法nfig)# interface lan 1
Router(遊雅堂 登録方法nfig-if lan 1)# ip address 172.16.0.1 255.255.0.0
Router(遊雅堂 登録方法nfig-if lan 1)# exit
!
!
! PPPoE1 ?̊e??ݒ?????܂??B
!
Router(遊雅堂 登録方法nfig)# interface pppoe 1
Router(遊雅堂 登録方法nfig-if pppoe 1)# pppoe server A-P遊雅堂 登録方法vider
Router(遊雅堂 登録方法nfig-if pppoe 1)# pppoe ac遊雅堂 登録方法unt user@xxxx.ne.jp secret
Router(遊雅堂 登録方法nfig-if pppoe 1)# pppoe type host
Router(遊雅堂 登録方法nfig-if pppoe 1)# crypto map VPN1
Router(遊雅堂 登録方法nfig-if pppoe 1)# crypto map VPN2
!                          1?̃C???^?t?F?[?X???2??VPN?𒣂?܂?
Router(遊雅堂 登録方法nfig-if pppoe 1)# exit
!
!
! ?Z???^???̃s?A?ւ̃??[?g??ݒ肵?܂??B
!
Router(遊雅堂 登録方法nfig)# ip 遊雅堂 登録方法ute 200.200.200.200 255.255.255.255 pppoe 1
Router(遊雅堂 登録方法nfig)# ip 遊雅堂 登録方法ute 100.100.100.100 255.255.255.255 pppoe 1
!
!
! DHCP?T?[?o?@?\??ݒ肵?܂??B
!
Router(遊雅堂 登録方法nfig)# service dhcp-server
Router(遊雅堂 登録方法nfig)# ip dhcp pool lan1 *4
Router(遊雅堂 登録方法nfig-dhcp-pool)# default-遊雅堂 登録方法uter 0.0.0.0
Router(遊雅堂 登録方法nfig-dhcp-pool)# exit
!
!
! IPsec???ו??U?̐ݒ?????܂??B
!
Router(遊雅堂 登録方法nfig)# vpn enable
Router(遊雅堂 登録方法nfig)# vpnlog enable
!
Router(遊雅堂 登録方法nfig)# crypto isakmp policy 1
Router(遊雅堂 登録方法nfig-isakmp)# authentication prekey
Router(遊雅堂 登録方法nfig-isakmp)# encryption aes 128
Router(遊雅堂 登録方法nfig-isakmp)# g遊雅堂 登録方法up 2
Router(遊雅堂 登録方法nfig-isakmp)# hash sha
Router(遊雅堂 登録方法nfig-isakmp)# keepalive icmp always-send
!                                  icmp?ɂ??펞keep alive???s???܂?
Router(遊雅堂 登録方法nfig-isakmp)# keepalive-icmp peer-address 192.168.3.1
!                                  ?Ď???̃A?h???X??ݒ肵?܂?
Router(遊雅堂 登録方法nfig-isakmp)# keepalive-icmp source-interface lan 1
!                                  ???M??IP?A?h???X??LAN??IP?A?h???X?Ƃ??邱?Ƃɂ??A
!                                  VPN?g???l????ʂ???keep alive???????Ȃ??܂?
Router(遊雅堂 登録方法nfig-isakmp)# keepalive-icmp multi-path interface pppoe 1 *1
!                                  keep alive?̑???M?C???^?t?F?[?X???Œ肵?܂?
Router(遊雅堂 登録方法nfig-isakmp)# key ascii furukawa
Router(遊雅堂 登録方法nfig-isakmp)# my-identity kyoten1-1
Router(遊雅堂 登録方法nfig-isakmp)# negotiation-mode aggressive
Router(遊雅堂 登録方法nfig-isakmp)# peer-identity address 200.200.200.200
Router(遊雅堂 登録方法nfig-isakmp)# exit
!
Router(遊雅堂 登録方法nfig)# crypto isakmp policy 2
Router(遊雅堂 登録方法nfig-isakmp)# authentication prekey
Router(遊雅堂 登録方法nfig-isakmp)# encryption aes 128
Router(遊雅堂 登録方法nfig-isakmp)# g遊雅堂 登録方法up 2
Router(遊雅堂 登録方法nfig-isakmp)# hash sha
Router(遊雅堂 登録方法nfig-isakmp)# keepalive icmp always-send
Router(遊雅堂 登録方法nfig-isakmp)# keepalive-icmp peer-address 192.168.3.20
Router(遊雅堂 登録方法nfig-isakmp)# keepalive-icmp source-interface lan 1
Router(遊雅堂 登録方法nfig-isakmp)# keepalive-icmp multi-path interface pppoe 1 *1
Router(遊雅堂 登録方法nfig-isakmp)# key ascii furukawa
Router(遊雅堂 登録方法nfig-isakmp)# my-identity kyoten1-2
Router(遊雅堂 登録方法nfig-isakmp)# negotiation-mode aggressive
Router(遊雅堂 登録方法nfig-isakmp)# peer-identity address 100.100.100.100
Router(遊雅堂 登録方法nfig-isakmp)# exit
!
Router(遊雅堂 登録方法nfig)# ipsec transform-set P2-POLICY esp-aes-128 esp-sha-hmac
!
Router(遊雅堂 登録方法nfig)# ipsec access-list 10 ipsec ip 172.16.0.0 0.0.255.255 any
Router(遊雅堂 登録方法nfig)# ipsec access-list 64 bypass ip any any
!
Router(遊雅堂 登録方法nfig)# crypto map VPN1 1
Router(遊雅堂 登録方法nfig-crypto-map)# match address 10 multi-path balance 2 *2
!                          VPN1???̔䗦??2?Ƃ??ĕ??ו??U???܂?
Router(遊雅堂 登録方法nfig-crypto-map)# set peer address 200.200.200.200
Router(遊雅堂 登録方法nfig-crypto-map)# set security-association always-up
!                          SA???펞?m?????Ă????悤?ɂ??܂?
Router(遊雅堂 登録方法nfig-crypto-map)# set transform-set P2-POLICY
Router(遊雅堂 登録方法nfig-crypto-map)# sa-up 遊雅堂 登録方法ute interface pppoe 1 local-p遊雅堂 登録方法t1 *3
!                          SA?̊m?????_?@?Ƃ??ăZ???^??LAN(any)?ւ̃??[?g????
!                          nexthop??pppoe1?Ƃ??ēo?^???܂?
Router(遊雅堂 登録方法nfig-crypto-map)# exit
!
Router(遊雅堂 登録方法nfig)# crypto map VPN2 2
Router(遊雅堂 登録方法nfig-crypto-map)# match address 10 multi-path balance 1 *2
!                          VPN2???̔䗦??1?Ƃ??ĕ??ו??U???܂?
Router(遊雅堂 登録方法nfig-crypto-map)# set peer address 100.100.100.100
Router(遊雅堂 登録方法nfig-crypto-map)# set security-association always-up
Router(遊雅堂 登録方法nfig-crypto-map)# sa-up 遊雅堂 登録方法ute interface pppoe 1 local-p遊雅堂 登録方法t2 *3
!                      ?@?@VPN1??VPN2?őS?????????[?g??񂪓o?^????邱?ƂɂȂ?̂ŁA
!                      ?@?@???̂Q??local-p遊雅堂 登録方法t?I?v?V??????t???ċ?ʂł???悤?ɂ??܂??B
Router(遊雅堂 登録方法nfig-crypto-map)# set transform-set P2-POLICY
Router(遊雅堂 登録方法nfig-crypto-map)# exit
!
!
! ???????[?U???[?h?ɖ߂?܂??B
!
Router(遊雅堂 登録方法nfig)# end
!
!
! ?ݒ??ۑ????܂??B
!
遊雅堂 登録方法uter# save SIDE-A.cfg
% saving working-遊雅堂 登録方法nfig
% finished saving

Router#
!
!
! ?ݒ??L???ɂ??邽?߂ɍċN?????܂??B
!
Router# reset
Are you OK to 遊雅堂 登録方法ld start?(y/n) y

*1 ?F	pppoe 1 ?ł͂Ȃ??Aewan 1 ?ŃA?h???X???}?j???A???ݒ肵?Ă???ꍇ?́A???̂悤?ɐݒ肵?܂??B keepalive-icmp multi-path address <NEXTHOP ?̃A?h???X
*2 ?F	F100?ł?V01.10?ȍ~?AF1000?ł?V01.03?ȍ~?̃t?@?[???E?F?A????A?ǂ??炩?̔䗦??0?ɐݒ?ł???悤?ɂȂ?܂????B ???ו??U?̔䗦?͑??M?????̃p?P?b?g?ɑ΂??Ă̂݋@?\???܂??B
*3 ?F	pppoe 1 ?ł͂Ȃ??Aewan 1 ?ŃA?h???X???}?j???A???ݒ肵?Ă???ꍇ?́A???̂悤?ɐݒ肵?܂??B sa-up 遊雅堂登録方法ute address <NEXTHOP ?̃A?h???X local-p遊雅堂登録方法t1 sa-up 遊雅堂登録方法ute address <NEXTHOP ?̃A?h???X local-p遊雅堂登録方法t2
*4 ?F	遊雅堂登録方法TELnet F200/F2000?ł́A?R?}???h???????ύX?ɂȂ??Ă???A???L?̗l?ȃR?}???h?ƂȂ?܂??B Router(遊雅堂登録方法nfig)# ip dhcp pool lan 1

?R?}???h?ݒ?̗?

?i!?̍s?̓R?????g?ł??B???ۂɓ??͂???K?v?͂???܂???B?j

???̐ݒ?𗘗p??????????

?Z???^?? 遊雅堂登録方法TELnet-F1000-1 ?̐ݒ?

!
!
! ???????[?U???[?h?Ɉڍs???܂??B
!
遊雅堂 登録方法uter enable
Enter password: super ???p?X???[?h????͂??܂??B?i???ۂ͕\??????Ȃ??j

遊雅堂 登録方法uter#
!
!
! ??{?ݒ胂?[?h?Ɉڍs???܂??B
!
遊雅堂 登録方法uter# 遊雅堂 登録方法nfigure terminal
Router(遊雅堂 登録方法nfig)#
!
Router(遊雅堂 登録方法nfig)# hostname F1000-1
F1000-1(遊雅堂 登録方法nfig)#
!
!
! LAN??IP?A?h???X??ݒ肵?܂??B
!
F1000-1(遊雅堂 登録方法nfig)# interface lan 1
F1000-1(遊雅堂 登録方法nfig-if lan 1)# ip address 192.168.3.1 255.255.255.0
F1000-1(遊雅堂 登録方法nfig-if lan 1)# exit
!
!
! PPPoE1 ?̊e??ݒ?????܂??B
!
F1000-1(遊雅堂 登録方法nfig)# interface pppoe 1
F1000-1(遊雅堂 登録方法nfig-if pppoe 1)# crypto map map1
F1000-1(遊雅堂 登録方法nfig-if pppoe 1)# pppoe server test
F1000-1(遊雅堂 登録方法nfig-if pppoe 1)# pppoe ac遊雅堂 登録方法unt zyx@furukawa.遊雅堂 登録方法.jp zyx
F1000-1(遊雅堂 登録方法nfig-if pppoe 1)# pppoe type host
F1000-1(遊雅堂 登録方法nfig-if pppoe 1)# ip address 200.200.200.200
F1000-1(遊雅堂 登録方法nfig-if pppoe 1)# exit
!
!
! ???[?g?̐ݒ?????܂??B
!
F1000-1(遊雅堂 登録方法nfig)# ip 遊雅堂 登録方法ute 0.0.0.0 0.0.0.0 192.168.3.254
!
!
! RIP?̐ݒ?????܂??B
!
F1000-1(遊雅堂 登録方法nfig)# 遊雅堂 登録方法uter rip
F1000-1(遊雅堂 登録方法nfig-rip)# network lan 1
F1000-1(遊雅堂 登録方法nfig-rip)# exit
!
!
! IPsec???ו??U?̐ݒ?????܂??B
!
F1000-1(遊雅堂 登録方法nfig)# vpn enable
F1000-1(遊雅堂 登録方法nfig)# vpnlog enable
!
F1000-1(遊雅堂 登録方法nfig)# crypto isakmp policy 1
F1000-1(遊雅堂 登録方法nfig-isakmp)# authentication prekey
F1000-1(遊雅堂 登録方法nfig-isakmp)# encryption aes 128
F1000-1(遊雅堂 登録方法nfig-isakmp)# g遊雅堂 登録方法up 2
F1000-1(遊雅堂 登録方法nfig-isakmp)# hash sha
F1000-1(遊雅堂 登録方法nfig-isakmp)# keepalive icmp always-send
F1000-1(遊雅堂 登録方法nfig-isakmp)# keepalive-icmp peer-address 172.16.0.1
F1000-1(遊雅堂 登録方法nfig-isakmp)# keepalive-icmp source-interface lan 1
F1000-1(遊雅堂 登録方法nfig-isakmp)# keepalive-icmp multi-path interface pppoe 1
F1000-1(遊雅堂 登録方法nfig-isakmp)# key ascii furukawa
F1000-1(遊雅堂 登録方法nfig-isakmp)# negotiation-mode aggressive
F1000-1(遊雅堂 登録方法nfig-isakmp)# peer-identity host kyoten1-1
F1000-1(遊雅堂 登録方法nfig-isakmp)# tunnel-遊雅堂 登録方法ute interface pppoe 1
!                       ?Ό???VPN?s?A?ւ̃??[?g???Anexthop??PPPoE1?Ƃ??ēo?^???܂?
F1000-1(遊雅堂 登録方法nfig-isakmp)# exit
!
F1000-1(遊雅堂 登録方法nfig)# ipsec transform-set P2-POLICY esp-aes-128 esp-sha-hmac
!
F1000-1(遊雅堂 登録方法nfig)# ipsec access-list 10 ipsec ip any 172.16.0.0 0.0.255.255
F1000-1(遊雅堂 登録方法nfig)# ipsec access-list 64 bypass ip any any
!
F1000-1(遊雅堂 登録方法nfig)# crypto map map1 1
F1000-1(遊雅堂 登録方法nfig-crypto-map)# match address 10
F1000-1(遊雅堂 登録方法nfig-crypto-map)# set peer host kyoten1-1
F1000-1(遊雅堂 登録方法nfig-crypto-map)# set transform-set P2-POLICY
F1000-1(遊雅堂 登録方法nfig-crypto-map)# sa-up 遊雅堂 登録方法ute interface pppoe 1
!                           local-p遊雅堂 登録方法t?I?v?V???????Ȃ??ꍇ?Aredistribute?Ŏw?肵?Ȃ??Ă??A
!                           ???̃??[?g????RIP?ōL?????܂??B
!                           local-p遊雅堂 登録方法t?I?v?V??????????ꍇ?ARIP?ōL??????ɂ́A
!                           ?????I??redistribute?Ŏw?肷??K?v??????܂??B
F1000-1(遊雅堂 登録方法nfig-crypto-map)# exit
!
!
! ???????[?U???[?h?ɖ߂?܂??B
!
F1000-1(遊雅堂 登録方法nfig)# end
F1000-1#
!
!
! ?ݒ??ۑ????܂??B
!
F1000-1# save SIDE-A.cfg
% saving working-遊雅堂 登録方法nfig
% finished saving

F1000-1#
!
!
! ?ݒ??L???ɂ??邽?߂ɍċN?????܂??B
!
F1000-1# reset
Are you OK to 遊雅堂 登録方法ld start?(y/n) y

?R?}???h?ݒ?̗?

?i!?̍s?̓R?????g?ł??B???ۂɓ??͂???K?v?͂???܂???B?j

???̐ݒ?𗘗p??????????

<pre>
!
hostname F1000-2
!
interface lan 1
 ip address 192.168.3.20 255.255.255.0
exit
!
interface pppoe 1
 crypto map map1
 ip address 100.100.100.100
 pppoe server test
 pppoe ac遊雅堂 登録方法unt xyz@furukawa.遊雅堂 登録方法.jp xyz
 pppoe type host
exit
!
ip route 0.0.0.0 0.0.0.0 192.168.3.254
!
access-list 10 permit 172.16.0.0 0.0.255.255
!
router rip
 network lan 1
 offset-list 10 out 5 lan 1
exit
!
vpn enable
vpnlog enable
!
crypto isakmp policy 1
 authentication prekey
 encryption aes 128
 group 2
 hash sha
 keepalive icmp always-send
 keepalive-icmp peer-address 172.16.0.1
 keepalive-icmp source-interface lan 1
 keepalive-icmp multi-path interface pppoe 1
 key ascii furukawa
 negotiation-mode aggressive
 peer-identity host kyoten1-2
 tunnel-route interface pppoe 1
exit
!
ipsec transform-set P2-POLICY esp-aes-128 esp-sha-hmac
!
ipsec access-list 10 ipsec ip any 172.16.0.0 0.0.255.255
ipsec access-list 64 bypass ip any any
!
crypto map map1 1
 match address 10
 set peer host kyoten1-2
 set transform-set P2-POLICY
 sa-up route interface pppoe 1
exit
!
end
</pre>

?Z???^?? 遊雅堂登録方法TELnet-F1000-2 ?̐ݒ?

!
!
! ???????[?U???[?h?Ɉڍs???܂??B
!
遊雅堂 登録方法uter enable
Enter password: super ???p?X???[?h????͂??܂??B?i???ۂ͕\??????Ȃ??j

遊雅堂 登録方法uter#
!
!
! ??{?ݒ胂?[?h?Ɉڍs???܂??B
!
遊雅堂 登録方法uter# 遊雅堂 登録方法nfigure terminal
Router(遊雅堂 登録方法nfig)#
!
Router(遊雅堂 登録方法nfig)# hostname F1000-2
F1000-2(遊雅堂 登録方法nfig)#
!
!
! LAN??IP?A?h???X??ݒ肵?܂??B
!
F1000-2(遊雅堂 登録方法nfig)# interface lan 1
F1000-2(遊雅堂 登録方法nfig-if lan 1)# ip address 192.168.3.20 255.255.255.0
F1000-2(遊雅堂 登録方法nfig-if lan 1)# exit
!
!
! PPPoE1 ?̊e??ݒ?????܂??B
!
F1000-2(遊雅堂 登録方法nfig)# interface pppoe 1
F1000-2(遊雅堂 登録方法nfig-if pppoe 1)# crypto map map1
F1000-2(遊雅堂 登録方法nfig-if pppoe 1)# ip address 100.100.100.100
F1000-2(遊雅堂 登録方法nfig-if pppoe 1)# pppoe server test
F1000-2(遊雅堂 登録方法nfig-if pppoe 1)# pppoe ac遊雅堂 登録方法unt xyz@furukawa.遊雅堂 登録方法.jp xyz
F1000-2(遊雅堂 登録方法nfig-if pppoe 1)# pppoe type host
F1000-2(遊雅堂 登録方法nfig-if pppoe 1)# exit
!
!
! ???[?g?̐ݒ?????܂??B
!
F1000-2(遊雅堂 登録方法nfig)# ip 遊雅堂 登録方法ute 0.0.0.0 0.0.0.0 192.168.3.254
!
!
! RIP?̐ݒ?????܂??B
!
F1000-2(遊雅堂 登録方法nfig)# access-list 10 permit 172.16.0.0 0.0.255.255
F1000-2(遊雅堂 登録方法nfig)# 遊雅堂 登録方法uter rip
F1000-2(遊雅堂 登録方法nfig-rip)# network lan 1
F1000-2(遊雅堂 登録方法nfig-rip)# offset-list 10 out 5 lan 1
!                    sa-up???[?g?œo?^????????RIP?ōL??????ۂɁAmetric?l??+5???ďo???悤?ɂ??܂??B
F1000-2(遊雅堂 登録方法nfig-rip)# exit
!
!
! IPsec???ו??U?̐ݒ?????܂??B
!
F1000-2(遊雅堂 登録方法nfig)# vpn enable
F1000-2(遊雅堂 登録方法nfig)# vpnlog enable
!
F1000-2(遊雅堂 登録方法nfig)# crypto isakmp policy 1
F1000-2(遊雅堂 登録方法nfig-isakmp)# authentication prekey
F1000-2(遊雅堂 登録方法nfig-isakmp)# encryption aes 128
F1000-2(遊雅堂 登録方法nfig-isakmp)# g遊雅堂 登録方法up 2
F1000-2(遊雅堂 登録方法nfig-isakmp)# hash sha
F1000-2(遊雅堂 登録方法nfig-isakmp)# keepalive icmp always-send
F1000-2(遊雅堂 登録方法nfig-isakmp)# keepalive-icmp peer-address 172.16.0.1
F1000-2(遊雅堂 登録方法nfig-isakmp)# keepalive-icmp source-interface lan 1
F1000-2(遊雅堂 登録方法nfig-isakmp)# keepalive-icmp multi-path interface pppoe 1
F1000-2(遊雅堂 登録方法nfig-isakmp)# key ascii furukawa
F1000-2(遊雅堂 登録方法nfig-isakmp)# negotiation-mode aggressive
F1000-2(遊雅堂 登録方法nfig-isakmp)# peer-identity host kyoten1-2
F1000-2(遊雅堂 登録方法nfig-isakmp)# tunnel-遊雅堂 登録方法ute interface pppoe 1
F1000-2(遊雅堂 登録方法nfig-isakmp)# exit
!
F1000-2(遊雅堂 登録方法nfig)# ipsec transform-set P2-POLICY esp-aes-128 esp-sha-hmac
!
F1000-2(遊雅堂 登録方法nfig)# ipsec access-list 10 ipsec ip any 172.16.0.0 0.0.255.255
F1000-2(遊雅堂 登録方法nfig)# ipsec access-list 64 bypass ip any any
!
F1000-2(遊雅堂 登録方法nfig)# crypto map map1 1
F1000-2(遊雅堂 登録方法nfig-crypto-map)# match address 10
F1000-2(遊雅堂 登録方法nfig-crypto-map)# set peer host kyoten1-2
F1000-2(遊雅堂 登録方法nfig-crypto-map)# set transform-set P2-POLICY
F1000-2(遊雅堂 登録方法nfig-crypto-map)# sa-up 遊雅堂 登録方法ute interface pppoe 1
F1000-2(遊雅堂 登録方法nfig-crypto-map)# exit
!
!
! ???????[?U???[?h?ɖ߂?܂??B
!
F1000-2(遊雅堂 登録方法nfig)# end
F1000-2#
!
!
! ?ݒ??ۑ????܂??B
!
F1000-2# save SIDE-A.cfg
% saving working-遊雅堂 登録方法nfig
% finished saving

F1000-2#
!
!
! ?ݒ??L???ɂ??邽?߂ɍċN?????܂??B
!
F1000-2# reset
Are you OK to 遊雅堂 登録方法ld start?(y/n) y

?y?[?W?g?b?v??

?T?C?g?}?b?v?É͓d?HHOMElこの遊雅堂キャンペーンコード 2024について