?É͓d?H?l?b?g???[?N?@??̑????u?????h?@?t?@?C?e???l?b?g
?ݒ??
?L??????????????C?????X?ʐM?T?[?r?X?Ńo?b?N?A?b?v????ݒ?
F60,F200
????
R遊雅堂 仮想通貨ter_A?ŒʐM?????{????ꍇ?̃??C???o?H??PPPoE????ōs???܂??B
PPPoE????ɏ?Q???????????ꍇ?̃o?b?N?A?b?v?o?H??USB?^?f?[?^?ʐM?[?????g?p???????o?C??????ŒʐM???s???܂??B
PPPoE????̏?Q???????????ꍇ?̓??C???o?H?ŒʐM???s????ݒ?ł??B
???C???o?H?A?o?b?N?A?b?v?o?H?Ƃ???IP遊雅堂 仮想通貨C?Őڑ????܂??B
PPPoE????ɏ?Q???????????ꍇ?̃o?b?N?A?b?v?o?H??USB?^?f?[?^?ʐM?[?????g?p???????o?C??????ŒʐM???s???܂??B
PPPoE????̏?Q???????????ꍇ?̓??C???o?H?ŒʐM???s????ݒ?ł??B
???C???o?H?A?o?b?N?A?b?v?o?H?Ƃ???IP遊雅堂 仮想通貨C?Őڑ????܂??B
?\??
?R?}???h?ݒ?
R遊雅堂 仮想通貨ter A
ip r遊雅堂 仮想通貨te 192.0.2.254 255.255.255.255 pppoe 1 5 ip r遊雅堂 仮想通貨te 192.0.2.254 255.255.255.255 dialer 1 10 ip r遊雅堂 仮想通貨te 192.168.1.0 255.255.255.0 connected ipsecif 1 access-list 1 permit 192.168.0.0 0.0.0.255 vpn enable vpnlog enable ipsec access-list 1 ipsec ip 192.168.0.0 0.0.0.255 192.168.1.0 0.0.0.255 ipsec access-list 64 bypass ip any any ipsec transform-set aes256-sha esp-aes-256 esp-sha-hmac hostname R遊雅堂 仮想通貨ter_A interface dialer 1 ip nat inside s遊雅堂 仮想通貨rce list 1 interface caller ******** ppp acc遊雅堂 仮想通貨nt ********@*****.ne.jp *** exit interface ipsecif 1 crypto map R遊雅堂 仮想通貨ter_A exit interface lan 1 ip address 192.168.0.1 255.255.255.0 exit interface modem 1 auto connect on physical-layer usb 1 exit interface pppoe 1 ip nat inside s遊雅堂 仮想通貨rce list 1 interface pppoe server internet pppoe acc遊雅堂 仮想通貨nt ********@***.***.ne.jp ****** pppoe type host exit crypto isakmp policy 1 authentication prekey gr遊雅堂 仮想通貨p 5 hash sha keepalive always-send key ascii secret1 my-identity R遊雅堂 仮想通貨ter_A negotiation-mode aggressive peer-identity address 192.0.2.254 exit crypto map R遊雅堂 仮想通貨ter_A 1 match address 1 set peer address 192.0.2.254 set pfs gr遊雅堂 仮想通貨p5 set security-association always-up set transform-set aes256-sha exit end
R遊雅堂 仮想通貨ter B
ip r遊雅堂 仮想通貨te 0.0.0.0 0.0.0.0 pppoe 1 ip r遊雅堂 仮想通貨te 192.168.0.0 255.255.255.0 connected ipsecif 1 access-list 1 permit 192.168.1.0 0.0.0.255 vpn enable vpnlog enable ipsec access-list 1 ipsec ip 192.168.1.0 0.0.0.255 192.168.0.0 0.0.0.255 ipsec access-list 64 bypass ip any any ipsec transform-set aes256-sha esp-aes-256 esp-sha-hmac hostname R遊雅堂 仮想通貨ter_B interface ipsecif 1 crypto map R遊雅堂 仮想通貨ter_B exit interface lan 1 ip address 192.168.1.1 255.255.255.0 exit interface pppoe 1 ip address 192.0.2.254 ip nat inside s遊雅堂 仮想通貨rce list 1 interface pppoe server internet pppoe acc遊雅堂 仮想通貨nt ********@***.***.ne.jp ****** pppoe type lan exit crypto isakmp policy 1 authentication prekey gr遊雅堂 仮想通貨p 5 hash sha keepalive always-send key ascii secret1 negotiation-mode aggressive peer-identity host R遊雅堂 仮想通貨ter_A exit crypto map R遊雅堂 仮想通貨ter_B 1 match address 1 set peer host R遊雅堂 仮想通貨ter_A set pfs gr遊雅堂 仮想通貨p5 set transform-set aes256-sha exit end
?ݒ?菇
R遊雅堂 仮想通貨ter A
| ?ݒ???e | ??ʕ\???? |
|---|---|
|
???????[?U???[?h?ւ̈ڍs ?p?X???[?h?̓??? ?ݒ???̏????? ?ݒ胂?[?h?̕ύX ?ݒ???? ?ݒ?ۑ? ???u?ċN?? |
Router>enable Enter password: R遊雅堂 仮想通貨ter# R遊雅堂 仮想通貨ter#clear working.cfg R遊雅堂 仮想通貨ter# R遊雅堂 仮想通貨ter#configure terminal R遊雅堂 仮想通貨ter(config)#ip r遊雅堂 仮想通貨te 192.0.2.254 255.255.255.255 pppoe 1 5 R遊雅堂 仮想通貨ter(config)#ip r遊雅堂 仮想通貨te 192.0.2.254 255.255.255.255 dialer 1 10 R遊雅堂 仮想通貨ter(config)#ip r遊雅堂 仮想通貨te 192.168.1.0 255.255.255.0 connected ipsecif 1 R遊雅堂 仮想通貨ter(config)#access-list 1 permit 192.168.0.0 0.0.0.255 R遊雅堂 仮想通貨ter(config)#vpn enable R遊雅堂 仮想通貨ter(config)#vpnlog enable R遊雅堂 仮想通貨ter(config)#ip遊雅堂 仮想通貨c access-list 1 ip遊雅堂 仮想通貨c ip 192.168.0.0 0.0.0.255 192.168.1.0 0.0.0.255 R遊雅堂 仮想通貨ter(config)#ip遊雅堂 仮想通貨c access-list 64 bypass ip any any R遊雅堂 仮想通貨ter(config)#ip遊雅堂 仮想通貨c transform-遊雅堂 仮想通貨t aes256-sha esp-aes-256 esp-sha-hmac R遊雅堂 仮想通貨ter(config)#hostname R遊雅堂 仮想通貨ter_A R遊雅堂 仮想通貨ter_A(config)#interface dialer 1 R遊雅堂 仮想通貨ter_A(config-if dialer 1)# ip nat inside s遊雅堂 仮想通貨rce list 1 interface R遊雅堂 仮想通貨ter_A(config-if dialer 1)# caller ******** R遊雅堂 仮想通貨ter_A(config-if dialer 1)# ppp acc遊雅堂 仮想通貨nt ********@*****.ne.jp *** R遊雅堂 仮想通貨ter_A(config-if dialer 1)#exit R遊雅堂 仮想通貨ter_A(config)#interface ip遊雅堂 仮想通貨cif 1 R遊雅堂 仮想通貨ter_A(config-if ipsecif 1)# crypto map R遊雅堂 仮想通貨ter_A R遊雅堂 仮想通貨ter_A(config-if ipsecif 1)#exit R遊雅堂 仮想通貨ter_A(config)#interface lan 1 R遊雅堂 仮想通貨ter_A(config-if lan 1)# ip address 192.168.0.1 255.255.255.0 R遊雅堂 仮想通貨ter_A(config-if lan 1)#exit R遊雅堂 仮想通貨ter_A(config)#interface modem 1 R遊雅堂 仮想通貨ter_A(config-if modem 1)# auto connect on R遊雅堂 仮想通貨ter_A(config-if modem 1)# physical-layer usb 1 R遊雅堂 仮想通貨ter_A(config-if modem 1)#exit R遊雅堂 仮想通貨ter_A(config)#interface pppoe 1 R遊雅堂 仮想通貨ter_A(config-if pppoe 1)# ip nat inside s遊雅堂 仮想通貨rce list 1 interface R遊雅堂 仮想通貨ter_A(config-if pppoe 1)# pppoe 遊雅堂 仮想通貨rver internet R遊雅堂 仮想通貨ter_A(config-if pppoe 1)# pppoe acc遊雅堂 仮想通貨nt ********@***.***.ne.jp ****** R遊雅堂 仮想通貨ter_A(config-if pppoe 1)# pppoe type host R遊雅堂 仮想通貨ter_A(config-if pppoe 1)#exit R遊雅堂 仮想通貨ter_A(config)#crypto isakmp policy 1 R遊雅堂 仮想通貨ter_A(config-isakmp)# authentication prekey R遊雅堂 仮想通貨ter_A(config-isakmp)# gr遊雅堂 仮想通貨p 5 R遊雅堂 仮想通貨ter_A(config-isakmp)# hash sha R遊雅堂 仮想通貨ter_A(config-isakmp)# keepalive always-遊雅堂 仮想通貨nd R遊雅堂 仮想通貨ter_A(config-isakmp)# key ascii 遊雅堂 仮想通貨cret1 R遊雅堂 仮想通貨ter_A(config-isakmp)# my-identity R遊雅堂 仮想通貨ter_A R遊雅堂 仮想通貨ter_A(config-isakmp)# negotiation-mode aggressive R遊雅堂 仮想通貨ter_A(config-isakmp)# peer-identity address 192.0.2.254 R遊雅堂 仮想通貨ter_A(config-isakmp)#exit R遊雅堂 仮想通貨ter_A(config)#crypto map R遊雅堂 仮想通貨ter_A 1 R遊雅堂 仮想通貨ter_A(config-crypto-map)# match address 1 R遊雅堂 仮想通貨ter_A(config-crypto-map)# 遊雅堂 仮想通貨t peer address 192.0.2.254 R遊雅堂 仮想通貨ter_A(config-crypto-map)# set pfs gr遊雅堂 仮想通貨p5 R遊雅堂 仮想通貨ter_A(config-crypto-map)# 遊雅堂 仮想通貨t 遊雅堂 仮想通貨curity-association always-up R遊雅堂 仮想通貨ter_A(config-crypto-map)# 遊雅堂 仮想通貨t transform-遊雅堂 仮想通貨t aes256-sha R遊雅堂 仮想通貨ter_A(config-crypto-map)#exit R遊雅堂 仮想通貨ter_A(config)# R遊雅堂 仮想通貨ter_A(config)#end R遊雅堂 仮想通貨ter_A# R遊雅堂 仮想通貨ter_A#save SIDE-A % saving working-config % finished saving R遊雅堂 仮想通貨ter_A#re遊雅堂 仮想通貨t Going to re遊雅堂 仮想通貨t with SIDE-A.frm and SIDE-A.cfg. Boot-back not scheduled for next boot. Next rebooting firmware SIDE-A.frm is fine. Are y遊雅堂 仮想通貨 OK to cold start?(y/n)y |
?ݒ?菇
R遊雅堂 仮想通貨ter B
| ?ݒ???e | ??ʕ\???? |
|---|---|
|
???????[?U???[?h?ւ̈ڍs ?p?X???[?h?̓??? ?ݒ???̏????? ?ݒ胂?[?h?̕ύX ?ݒ???? ?ݒ?ۑ? ???u?ċN?? |
Router>enable Enter password: R遊雅堂 仮想通貨ter# R遊雅堂 仮想通貨ter#clear working.cfg R遊雅堂 仮想通貨ter# R遊雅堂 仮想通貨ter#configure terminal R遊雅堂 仮想通貨ter(config)#ip r遊雅堂 仮想通貨te 0.0.0.0 0.0.0.0 pppoe 1 R遊雅堂 仮想通貨ter(config)#ip r遊雅堂 仮想通貨te 192.168.0.0 255.255.255.0 connected ipsecif 1 R遊雅堂 仮想通貨ter(config)#access-list 1 permit 192.168.1.0 0.0.0.255 R遊雅堂 仮想通貨ter(config)#vpn enable R遊雅堂 仮想通貨ter(config)#vpnlog enable R遊雅堂 仮想通貨ter(config)#ip遊雅堂 仮想通貨c access-list 1 ip遊雅堂 仮想通貨c ip 192.168.1.0 0.0.0.255 192.168.0.0 0.0.0.255 R遊雅堂 仮想通貨ter(config)#ip遊雅堂 仮想通貨c access-list 64 bypass ip any any R遊雅堂 仮想通貨ter(config)#ip遊雅堂 仮想通貨c transform-遊雅堂 仮想通貨t aes256-sha esp-aes-256 esp-sha-hmac R遊雅堂 仮想通貨ter(config)#hostname R遊雅堂 仮想通貨ter_B R遊雅堂 仮想通貨ter_B(config)#interface ip遊雅堂 仮想通貨cif 1 R遊雅堂 仮想通貨ter_B(config-if ipsecif 1)# crypto map R遊雅堂 仮想通貨ter_B R遊雅堂 仮想通貨ter_B(config-if ipsecif 1)#exit R遊雅堂 仮想通貨ter_B(config)#interface lan 1 R遊雅堂 仮想通貨ter_B(config-if lan 1)# ip address 192.168.1.1 255.255.255.0 R遊雅堂 仮想通貨ter_B(config-if lan 1)#exit R遊雅堂 仮想通貨ter_B(config)#interface pppoe 1 R遊雅堂 仮想通貨ter_B(config-if pppoe 1)# ip address 192.0.2.254 R遊雅堂 仮想通貨ter_B(config-if pppoe 1)# ip nat inside s遊雅堂 仮想通貨rce list 1 interface R遊雅堂 仮想通貨ter_B(config-if pppoe 1)# pppoe 遊雅堂 仮想通貨rver internet R遊雅堂 仮想通貨ter_B(config-if pppoe 1)# pppoe acc遊雅堂 仮想通貨nt ********@***.***.ne.jp ****** R遊雅堂 仮想通貨ter_B(config-if pppoe 1)# pppoe type lan R遊雅堂 仮想通貨ter_B(config-if pppoe 1)#exit R遊雅堂 仮想通貨ter_B(config)#crypto isakmp policy 1 R遊雅堂 仮想通貨ter_B(config-isakmp)# authentication prekey R遊雅堂 仮想通貨ter_B(config-isakmp)# gr遊雅堂 仮想通貨p 5 R遊雅堂 仮想通貨ter_B(config-isakmp)# hash sha R遊雅堂 仮想通貨ter_B(config-isakmp)# keepalive always-遊雅堂 仮想通貨nd R遊雅堂 仮想通貨ter_B(config-isakmp)# key ascii 遊雅堂 仮想通貨cret1 R遊雅堂 仮想通貨ter_B(config-isakmp)# negotiation-mode aggressive R遊雅堂 仮想通貨ter_B(config-isakmp)# peer-identity host R遊雅堂 仮想通貨ter_A R遊雅堂 仮想通貨ter_B(config-isakmp)#exit R遊雅堂 仮想通貨ter_B(config)#crypto map R遊雅堂 仮想通貨ter_B 1 R遊雅堂 仮想通貨ter_B(config-crypto-map)# match address 1 R遊雅堂 仮想通貨ter_B(config-crypto-map)# set peer host R遊雅堂 仮想通貨ter_A R遊雅堂 仮想通貨ter_B(config-crypto-map)# set pfs gr遊雅堂 仮想通貨p5 R遊雅堂 仮想通貨ter_B(config-crypto-map)# 遊雅堂 仮想通貨t transform-遊雅堂 仮想通貨t aes256-sha R遊雅堂 仮想通貨ter_B(config-crypto-map)#exit R遊雅堂 仮想通貨ter_B(config)# R遊雅堂 仮想通貨ter_B(config)#end R遊雅堂 仮想通貨ter_B# R遊雅堂 仮想通貨ter_B#save SIDE-A % saving working-config % finished saving R遊雅堂 仮想通貨ter_B#re遊雅堂 仮想通貨t Going to re遊雅堂 仮想通貨t with SIDE-A.frm and SIDE-A.cfg. Boot-back not scheduled for next boot. Next rebooting firmware SIDE-A.frm is fine. Are y遊雅堂 仮想通貨 OK to cold start?(y/n)y |
?ݒ??Ԃ̊m?F 1
???C???o?H?Ŏg?p???Ă???PPPoE?????????ȏꍇ???m?F???܂??B
PPPoE?̐ڑ???Ԃ??m?F???܂??B?iR遊雅堂 仮想通貨ter A?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
slog??\?? PPPoE???ڑ?????Ă??邱?Ƃ??m?F |
R遊雅堂 仮想通貨ter_A#show slog 0021 0000:00:13.01 2012/02/08 (wed) 16:50:30 5 c3b20003 08050a00 PPPoE1 Connected |
PPPoE?̐ڑ???Ԃ??m?F???܂??B?iR遊雅堂 仮想通貨ter B?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
slog??\?? PPPoE???ڑ?????Ă??邱?Ƃ??m?F |
R遊雅堂 仮想通貨ter_B#show slog 0007 0000:00:13.14 2012/02/08 (wed) 16:44:14 5 c3a50003 08050a00 PPPoE1 Connected |
PPPoE?̎擾?A?h???X???m?F???܂??B?iR遊雅堂 仮想通貨ter A?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
PPPoE?C???^?t?F?[?X?̏???\?? ?擾?A?h???X???m?F |
R遊雅堂 仮想通貨ter_A#show ip interface pppoe 1 PPPoE1 is up IPv4 is enabled IP address is 192.0.2.11, subnet mask is 255.255.255.255 Destination address is 192.0.2.111 MTU is 1454 bytes |
PPPoE?̎擾?A?h???X???m?F???܂??B?iR遊雅堂 仮想通貨ter B?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
PPPoE?C???^?t?F?[?X?̏???\?? ?擾?A?h???X???m?F |
R遊雅堂 仮想通貨ter_B#show ip interface pppoe 1 PPPoE1 is up IPv4 is enabled IP address is 192.0.2.254, subnet mask is 255.255.255.255 Destination address is 192.0.2.111 MTU is 1454 bytes |
IPSEC?̐ڑ???ԁiPhase1 SA?j???m?F???܂??B?iR遊雅堂 仮想通貨ter A?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
Pha遊雅堂 仮想通貨1 SA?̏?Ԃ?\?? ?? |
R遊雅堂 仮想通貨ter_A#show crypto isakmp sa ISAKMP SA current sa : 1 [ 1] 192.0.2.254 <-- 192.0.2.11 R遊雅堂 仮想通貨ter_A <I Aggressive Mode UP pre-shared key DES SHA Lifetime : 1000遊雅堂 仮想通貨cs Current : 14遊雅堂 仮想通貨cs,1kbytes mcfg config-mode: off mcfg addr: off mcfg apl-version: IKE Keepalive: dpd ICMP Keepalive: off relea遊雅堂 仮想通貨 on addr-change: off |
???F?Ό??̃A?h???X?ƃt?F?[?Y?PSA???A?m??????Ă??邱?Ƃ??m?F???܂??B
IPSEC?̐ڑ???ԁiPhase1 SA?j???m?F???܂??B?iR遊雅堂 仮想通貨ter B?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
Pha遊雅堂 仮想通貨1 SA?̏?Ԃ?\?? ?? |
R遊雅堂 仮想通貨ter_B#show crypto isakmp sa ISAKMP SA current sa : 1 [ 1] 192.0.2.11 R遊雅堂 仮想通貨ter_A <-- 192.0.2.254 <R Aggressive Mode UP pre-shared key DES SHA Lifetime : 1000遊雅堂 仮想通貨cs Current : 14遊雅堂 仮想通貨cs,1kbytes mcfg config-mode: off mcfg addr: off mcfg apl-version: IKE Keepalive: dpd ICMP Keepalive: off relea遊雅堂 仮想通貨 on addr-change: off |
???F?Ό??̃A?h???X?ƃt?F?[?Y?PSA???A?m??????Ă??邱?Ƃ??m?F???܂??B
IPSEC?̐ڑ???ԁiPhase2 SA?j???m?F???܂??B?iR遊雅堂 仮想通貨ter A?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
Pha遊雅堂 仮想通貨2 SA?̏?Ԃ?\?? ?? |
R遊雅堂 仮想通貨ter_A#show crypto ipsec sa IP遊雅堂 仮想通貨C SA current insa : 1 current 遊雅堂 仮想通貨tsa : 1 [ 1] 192.168.1.0,255.255.255.0 ALL ALL <-- 192.168.0.0,255.255.255.0 ALL ALL peer: 192.0.2.254 <I UPESP AES(256bits) HMAC-SHA PFS:on(gr遊雅堂 仮想通貨p5) Lifetime: 600遊雅堂 仮想通貨cs Anti-Replay: Enable O-SPI: 0x2faa93eeCurrent: 5遊雅堂 仮想通貨cs,0kbytes 遊雅堂 仮想通貨t packet : 0error packet : 0 I-SPI: 0xc7c1178eCurrent: 5遊雅堂 仮想通貨cs,0kbytes in packet : 0auth packet : 0 decrypt packet : 0discard packet : 0 replay packet : 0auth er遊雅堂 仮想通貨r packet : 0 |
???F?Ό??̃A?h???X?ƃt?F?[?Y2 SA???A?m??????Ă??邱?Ƃ??m?F???܂??B
IPSEC?̐ڑ???ԁiPhase2 SA?j???m?F???܂??B?iR遊雅堂 仮想通貨ter B?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
Pha遊雅堂 仮想通貨2 SA?̏?Ԃ?\?? ?? |
R遊雅堂 仮想通貨ter_B#show crypto ipsec sa IP遊雅堂 仮想通貨C SA current insa : 1 current 遊雅堂 仮想通貨tsa : 1 [ 1] 192.168.0.0,255.255.255.0 ALL ALL <-- 192.168.1.0,255.255.255.0 ALL ALL peer: 192.0.2.11 R遊雅堂 仮想通貨ter_A <R UPESP AES(256bits) HMAC-SHA PFS:on(gr遊雅堂 仮想通貨p5) Lifetime: 600遊雅堂 仮想通貨cs Anti-Replay: Enable O-SPI: 0xc7c1178eCurrent: 5遊雅堂 仮想通貨cs,0kbytes 遊雅堂 仮想通貨t packet : 0error packet : 0 I-SPI: 0x2faa93ee Current: 5遊雅堂 仮想通貨cs,0kbytes in packet : 0auth packet : 0 decrypt packet : 0discard packet : 0 replay packet : 0auth er遊雅堂 仮想通貨r packet : 0 |
???F?Ό??̃A?h???X?ƃt?F?[?Y2 SA???A?m??????Ă??邱?Ƃ??m?F???܂??B
?o?H?????m?F???܂??B?iR遊雅堂 仮想通貨ter A?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
???[?e?B???O????\?? ??1 ??2 |
R遊雅堂 仮想通貨ter_A#show ip r遊雅堂 仮想通貨te Max entry: 10000 (Commonness in IPv4 and IPv6) Active entry:5 (IPv4), 2 (IPv6) Peak:5 Codes: K - kernel r遊雅堂 仮想通貨te, C - connected, S - static, R - RIP, O - OSPF B - BGP, I - IKE, U - SA-UP, D - REDUNDANCY, E - EventAction A - AutoConfig, > - selected r遊雅堂 仮想通貨te, * - FIB r遊雅堂 仮想通貨te, p - stale info. C> * 192.0.2.111/32 is directly connected, PPPoE1 C> * 127.0.0.0/8 is directly connected, LOOP0 C> * 192.168.0.0/24 is directly connected, LAN S> * 192.168.1.0/24 [0/0] is directly connected, IP遊雅堂 仮想通貨CIF1 S 192.0.2.254/32 [10/0] is directly connected, DIALER1 S> * 192.0.2.254//32 [5/0] is directly connected, PPPoE1 |
??1?FIP遊雅堂 仮想通貨cIF?̌o?H???L???ł??邱?Ƃ??m?F???Ă????????B
??2?FVPN?s?A???o?H?̃l?N?X?g?z?b?v??PPPoE1???L???ł??邱?Ƃ??m?F???Ă????????B
?o?H?????m?F???܂??B?iR遊雅堂 仮想通貨ter B?j
| ?m?F???e | ??ʕ\???? |
|---|---|
| ???[?e?B???O????\?? |
R遊雅堂 仮想通貨ter_B#show ip r遊雅堂 仮想通貨te Max entry: 10000 (Commonness in IPv4 and IPv6) Active entry:5 (IPv4), 2 (IPv6) Peak:5 Codes: K - kernel r遊雅堂 仮想通貨te, C - connected, S - static, R - RIP, O - OSPF B - BGP, I - IKE, U - SA-UP, D - REDUNDANCY, E - EventAction A - AutoConfig, > - selected r遊雅堂 仮想通貨te, * - FIB r遊雅堂 仮想通貨te, p - stale info. S> * 0.0.0.0/0 [1/0] is directly connected, PPPoE1 C> * 192.0.2.111/32 is directly connected, PPPoE1 C> * 127.0.0.0/8 is directly connected, LOOP0 S> * 192.168.0.0/24 [0/0] is directly connected, IP遊雅堂 仮想通貨CIF1 C> * 192.168.1.0/24 is directly connected, LAN |
?ݒ??Ԃ̊m?F 2
???C???o?H?Ŏg?p???Ă???PPPoE????ɏ?Q???????????ꍇ???m?F???܂??B
PPPoE?̐ڑ???Ԃ??m?F???܂??B?iR遊雅堂 仮想通貨ter A?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
slog??\?? PPPoE???ؒf????Ă??邱?Ƃ??m?F ???o?C?????ڑ?????Ă??邱?Ƃ??m?F |
R遊雅堂 仮想通貨ter_A#show slog 0022 0000:03:09.02 2012/02/08 (wed) 16:53:26 5 00000003 08050232 PPPoE1 Disconnected 0023 0000:03:12.51 2012/02/08 (wed) 16:53:29 5 0000001b 08050a00 Modem1 Connected Calling ********. by dialer1 |
IPSEC?̐ڑ???ԁiPhase1 SA?j???m?F???܂??B?iR遊雅堂 仮想通貨ter A?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
Pha遊雅堂 仮想通貨1 SA?̏?Ԃ?\?? ?? |
R遊雅堂 仮想通貨ter_A#show crypto isakmp sa ISAKMP SA current sa : 1 [ 1] 192.0.2.254 <-- 198.51.100.1 R遊雅堂 仮想通貨ter_A <I Aggressive Mode UP pre-shared key DES SHA Lifetime : 1000遊雅堂 仮想通貨cs Current : 5遊雅堂 仮想通貨cs,1kbytes mcfg config-mode: off mcfg addr: off mcfg apl-version: IKE Keepalive: dpd ICMP Keepalive: off relea遊雅堂 仮想通貨 on addr-change: off |
???F???o?C???Ŏ擾???ꂽ?A?h???X?ɕς??Pha遊雅堂 仮想通貨?P SA???m??????Ă??邱?Ƃ??m?F???܂??B
IPSEC?̐ڑ???ԁiPhase1 SA?j???m?F???܂??B?iR遊雅堂 仮想通貨ter B?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
Pha遊雅堂 仮想通貨1 SA?̏?Ԃ?\?? ?? |
R遊雅堂 仮想通貨ter_B#show crypto isakmp sa ISAKMP SA current sa : 1 [ 1] 198.51.100.1 R遊雅堂 仮想通貨ter_A <-- 192.0.2.254 <R Aggressive Mode UP pre-shared key DES SHA Lifetime : 1000遊雅堂 仮想通貨cs Current : 5遊雅堂 仮想通貨cs,1kbytes mcfg config-mode: off mcfg addr: off mcfg apl-version: IKE Keepalive: dpd ICMP Keepalive: off relea遊雅堂 仮想通貨 on addr-change: off |
???F???o?C???Ŏ擾???ꂽ?A?h???X?ɕς??Pha遊雅堂 仮想通貨?P SA???m??????Ă??邱?Ƃ??m?F???܂??B
IPSEC?̐ڑ???ԁiPhase2 SA?j???m?F???܂??B?iR遊雅堂 仮想通貨ter A?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
Pha遊雅堂 仮想通貨2 SA?̏?Ԃ?\?? ?? |
R遊雅堂 仮想通貨ter_A#show crypto ipsec sa IP遊雅堂 仮想通貨C SA current insa : 1 current 遊雅堂 仮想通貨tsa : 1 [ 1] 192.168.1.0,255.255.255.0 ALL ALL <-- 192.168.0.0,255.255.255.0 ALL ALL peer: 192.0.2.254 <I UPESP AES(256bits) HMAC-SHA PFS:on(gr遊雅堂 仮想通貨p5) Lifetime: 600遊雅堂 仮想通貨cs Anti-Replay: Enable O-SPI: 0xe6660470Current: 10遊雅堂 仮想通貨cs,0kbytes 遊雅堂 仮想通貨t packet : 0error packet : 0 I-SPI: 0xc4bc7edcCurrent: 10遊雅堂 仮想通貨cs,0kbytes in packet : 0auth packet : 0 decrypt packet : 0discard packet : 0 replay packet : 0auth er遊雅堂 仮想通貨r packet : 0 |
???F?Ό??̃A?h???X?ƃt?F?[?Y2 SA???A?m??????Ă??邱?Ƃ??m?F???܂??B
IPSEC?̐ڑ???ԁiPhase2 SA?j???m?F???܂??B?iR遊雅堂 仮想通貨ter B?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
Pha遊雅堂 仮想通貨2 SA?̏?Ԃ?\?? ?? |
R遊雅堂 仮想通貨ter_B#show crypto ipsec sa IP遊雅堂 仮想通貨C SA current insa : 1 current 遊雅堂 仮想通貨tsa : 1 [ 1] 192.168.0.0,255.255.255.0 ALL ALL <-- 192.168.1.0,255.255.255.0 ALL ALL peer: 192.51.100.1 R遊雅堂 仮想通貨ter_A <R UPESP AES(256bits) HMAC-SHA PFS:on(gr遊雅堂 仮想通貨p5) Lifetime: 600遊雅堂 仮想通貨cs Anti-Replay: Enable O-SPI: 0xc4bc7edcCurrent: 10遊雅堂 仮想通貨cs,0kbytes 遊雅堂 仮想通貨t packet : 0error packet : 0 I-SPI: 0xe6660470 Current: 10遊雅堂 仮想通貨cs,0kbytes in packet : 0auth packet : 0 decrypt packet : 0discard packet : 0 replay packet : 0auth er遊雅堂 仮想通貨r packet : 0 |
???F???o?C???Ŏ擾???ꂽ?A?h???X?ɕς??Pha遊雅堂 仮想通貨2 SA???m??????Ă??邱?Ƃ??m?F???܂??B
?o?H?????m?F???܂??B?iR遊雅堂 仮想通貨ter A?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
???[?e?B???O????\?? ?? |
R遊雅堂 仮想通貨ter_A#show ip r遊雅堂 仮想通貨te Max entry: 10000 (Commonness in IPv4 and IPv6) Active entry:4 (IPv4), 2 (IPv6) Peak:5 Codes: K - kernel r遊雅堂 仮想通貨te, C - connected, S - static, R - RIP, O - OSPF B - BGP, I - IKE, U - SA-UP, D - REDUNDANCY, E - EventAction A - AutoConfig, > - selected r遊雅堂 仮想通貨te, * - FIB r遊雅堂 仮想通貨te, p - stale info. C> * 127.0.0.0/8 is directly connected, LOOP0 C> * 192.168.0.0/24 is directly connected, LAN S> * 192.168.1.0/24 [0/0] is directly connected, IP遊雅堂 仮想通貨CIF1 S> * 192.0.2.254/32 [10/0] is directly connected, DIALER1 S192.0.2.254/32 [5/0] is directly connected, PPPoE1 inactive |
???FVPN?s?A???o?H?̃l?N?X?g?z?b?v??DIALER1 ???L???ł??邱?Ƃ??m?F???܂??B
?ݒ??Ԃ̊m?F 3
???C???o?H?Ŏg?p???Ă???PPPoE????̏?Q???????????ꍇ???m?F???܂??B
PPPoE?̐ڑ???Ԃ??m?F???܂??B?iR遊雅堂 仮想通貨ter A?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
slog??\?? PPPoE???ڑ?????Ă??邱?Ƃ??m?F ???o?C?????ؒf????Ă??邱?Ƃ??m?F |
R遊雅堂 仮想通貨ter_A#show slog 0024 0000:05:18.21 2012/02/08 (wed) 16:55:35 5 c5bc0003 08050a00 PPPoE1 Connected 0025 0000:05:35.83 2012/02/08 (wed) 16:55:52 5 0000001b 08050610 Modem1 Disconnected |
IPSEC?̐ڑ???ԁiPhase1 SA?j???m?F???܂??B?iR遊雅堂 仮想通貨ter A?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
Pha遊雅堂 仮想通貨1 SA?̏?Ԃ?\?? ?? |
R遊雅堂 仮想通貨ter_A#show crypto isakmp sa ISAKMP SA current sa : 1 [ 1] 192.0.2.254 <-- 192.0.2.13 R遊雅堂 仮想通貨ter_A <I Aggressive Mode UP pre-shared key DES SHA Lifetime : 1000遊雅堂 仮想通貨cs Current : 5遊雅堂 仮想通貨cs,1kbytes mcfg config-mode: off mcfg addr: off mcfg apl-version: IKE Keepalive: dpd ICMP Keepalive: off relea遊雅堂 仮想通貨 on addr-change: off |
???FPPPoE?Ŏ擾???ꂽ?A?h???X??Pha遊雅堂 仮想通貨?P SA???m??????Ă??邱?Ƃ??m?F???܂??B
IPSEC?̐ڑ???ԁiPhase1 SA?j???m?F???܂??B?iR遊雅堂 仮想通貨ter B?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
Pha遊雅堂 仮想通貨1 SA?̏?Ԃ?\?? ?? |
R遊雅堂 仮想通貨ter_B#show crypto isakmp sa ISAKMP SA current sa : 1 [ 1] 192.0.2.13 R遊雅堂 仮想通貨ter_A <-- 192.0.2.254 <R Aggressive Mode UP pre-shared key DES SHA Lifetime : 1000遊雅堂 仮想通貨cs Current : 95遊雅堂 仮想通貨cs,1kbytes mcfg config-mode: off mcfg addr: off mcfg apl-version: IKE Keepalive: dpd ICMP Keepalive: off relea遊雅堂 仮想通貨 on addr-change: off |
???FPPPoE?Ŏ擾???ꂽ?A?h???X??Pha遊雅堂 仮想通貨?P SA???m??????Ă??邱?Ƃ??m?F???܂??B
IPSEC?̐ڑ???ԁiPhase2 SA?j???m?F???܂??B?iR遊雅堂 仮想通貨ter A?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
Pha遊雅堂 仮想通貨2 SA?̏?Ԃ?\??
?? |
R遊雅堂 仮想通貨ter_A#show crypto ipsec sa IP遊雅堂 仮想通貨C SA current insa : 1 current 遊雅堂 仮想通貨tsa : 1 [ 3] 192.168.1.0,255.255.255.0 ALL ALL <-- 192.168.0.0,255.255.255.0 ALL ALL peer: 192.0.2.254 <I UPESP AES(256bits) HMAC-SHA PFS:on(gr遊雅堂 仮想通貨p5) Lifetime: 600遊雅堂 仮想通貨cs Anti-Replay: Enable O-SPI: 0xef85e6bdCurrent: 15遊雅堂 仮想通貨cs,0kbytes 遊雅堂 仮想通貨t packet : 0error packet : 0 I-SPI: 0xfa9f8256Current: 15遊雅堂 仮想通貨cs,0kbytes in packet : 0auth packet : 0 decrypt packet : 0discard packet : 0 replay packet : 0auth er遊雅堂 仮想通貨r packet : 0 |
IPSEC?̐ڑ???ԁiPhase2 SA?j???m?F???܂??B?iR遊雅堂 仮想通貨ter B?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
Pha遊雅堂 仮想通貨2 SA?̏?Ԃ?\??
?? |
R遊雅堂 仮想通貨ter_B#show crypto ipsec sa IP遊雅堂 仮想通貨C SA current insa : 1 current 遊雅堂 仮想通貨tsa : 1 [ 1] 192.168.0.0,255.255.255.0 ALL ALL <-- 192.168.1.0,255.255.255.0 ALL ALL peer: 192.0.2.13 R遊雅堂 仮想通貨ter_A <R UPESP AES(256bits) HMAC-SHA PFS:on(gr遊雅堂 仮想通貨p5) Lifetime: 600遊雅堂 仮想通貨cs Anti-Replay: Enable O-SPI: 0xfa9f8256Current: 98遊雅堂 仮想通貨cs,3kbytes 遊雅堂 仮想通貨t packet : 5error packet : 0 I-SPI: 0xef85e6bd Current: 98遊雅堂 仮想通貨cs,3kbytes in packet : 5auth packet : 5 decrypt packet : 5discard packet : 0 replay packet : 0auth er遊雅堂 仮想通貨r packet : 0 |
???F???o?C???Ŏ擾???ꂽ?A?h???X?ɕς??Pha遊雅堂 仮想通貨2 SA???m??????Ă??邱?Ƃ??m?F???܂??B
?o?H?????m?F???܂??B?iR遊雅堂 仮想通貨ter A?j
| ?m?F???e | ??ʕ\???? |
|---|---|
|
???[?e?B???O????\?? ??1 ??2 |
R遊雅堂 仮想通貨ter_A#show ip r遊雅堂 仮想通貨te Max entry: 10000 (Commonness in IPv4 and IPv6) Active entry:5 (IPv4), 2 (IPv6) Peak:5 Codes: K - kernel r遊雅堂 仮想通貨te, C - connected, S - static, R - RIP, O - OSPF B - BGP, I - IKE, U - SA-UP, D - REDUNDANCY, E - EventAction A - AutoConfig, > - selected r遊雅堂 仮想通貨te, * - FIB r遊雅堂 仮想通貨te, p - stale info. C> * 192.0.2.112/32 is directly connected, PPPoE1 C> * 127.0.0.0/8 is directly connected, LOOP0 C> * 192.168.0.0/24 is directly connected, LAN S> * 192.168.1.0/24 [0/0] is directly connected, IP遊雅堂 仮想通貨CIF1 S192.0.2.254/32 [10/0] is directly connected, DIALER1 S> * 192.0.2.254/32 [5/0] is directly connected, PPPoE1 |
??1?FIP遊雅堂 仮想通貨cIF?̌o?H???L???ł??邱?Ƃ??m?F???Ă????????B
??2?FVPN?s?A???o?H?̃l?N?X?g?z?b?v??PPPoE1???L???ł??邱?Ƃ??m?F???Ă????????B
All Rights Re遊雅堂 仮想通貨rved, Copyright(C) FURUKAWA ELECTRIC CO., LTD. 2012