?É͓d?H?l?b?g???[?N?@??̑????u?????h?@?t?@?C?e???l?b?g
?ݒ??
VRRP??2??̃??[?^???璷???AVPN???璷????ݒ?
F60,F200,F2000
????
?Q??̃??[?^??LAN????VRRP?ŃO???[?v?????A???z?A?h???X??ݒ肷?邱?Ƃɂ??A?@??璷???邱?Ƃ??ł??܂??B
?ԑ???IPSEC?Őڑ????A?ʐM??IPSEC?g???l???o?R?ŒʐM???s???܂??B
?}?X?^?[???[?^??????ȏꍇ?́A?}?X?^?[???[?^?Ɛڑ????Ă???IPSEC?ŒʐM???s???܂??B
?}?X?^?[???[?^?Ɍ̏Ⴊ???????ĒʐM?ł??Ȃ??ɂȂ????ꍇ?A?o?b?N?A?b?v???[?^?????z?A?h???X???????p???Ńo?b?N?A?b?v???[?^?Ɛڑ????Ă???IPSEC?ŒʐM???ĊJ???܂??B
?܂??A?}?X?^?[???[?^?̌̏Ⴊ?????????ꍇ?́A?}?X?^?[???[?^?Ɛڑ????Ă???IPSEC?ŒʐM????߂?ݒ?ł??B
Rout遊雅堂 登録方法_C????OSPF?ɂ??o?H?ؑւ??s???܂??B
?ԑ???IPSEC?Őڑ????A?ʐM??IPSEC?g???l???o?R?ŒʐM???s???܂??B
?}?X?^?[???[?^??????ȏꍇ?́A?}?X?^?[???[?^?Ɛڑ????Ă???IPSEC?ŒʐM???s???܂??B
?}?X?^?[???[?^?Ɍ̏Ⴊ???????ĒʐM?ł??Ȃ??ɂȂ????ꍇ?A?o?b?N?A?b?v???[?^?????z?A?h???X???????p???Ńo?b?N?A?b?v???[?^?Ɛڑ????Ă???IPSEC?ŒʐM???ĊJ???܂??B
?܂??A?}?X?^?[???[?^?̌̏Ⴊ?????????ꍇ?́A?}?X?^?[???[?^?Ɛڑ????Ă???IPSEC?ŒʐM????߂?ݒ?ł??B
Rout遊雅堂 登録方法_C????OSPF?ɂ??o?H?ؑւ??s???܂??B
?\??
?R?}???h?ݒ?
Rout遊雅堂 登録方法 A
ip route 192.168.1.0 255.255.255.0 192.168.0.2 20 ip route 198.51.100.1 255.255.255.255 192.0.2.2 ip vrrp enable vpn enable vpnlog enable ipsec access-list 1 ipsec ip any any ipsec access-list 64 bypass ip any any ipsec transform-set aes256-sha esp-aes-256 esp-sha-hmac hostname Rout遊雅堂 登録方法_A int遊雅堂 登録方法face ewan 1 ip mtu 1500 ip address 192.0.2.1 255.255.255.128 exit int遊雅堂 登録方法face ipsecif 1 crypto map Rout遊雅堂 登録方法_C ip ospf network point-to-point ip address 100.1.1.1 255.255.255.0 ip mtu 1500 exit int遊雅堂 登録方法face lan 1 ip address 192.168.0.1 255.255.255.0 vrrp 1 address 192.168.0.254 vrrp 1 priority 200 vrrp 1 preempt exit crypto isakmp policy 1 authentication prekey group 5 hash sha keepalive icmp always-send keepalive-icmp pe遊雅堂 登録方法-address 192.168.1.1 keepalive-icmp source-int遊雅堂 登録方法face lan 1 key ascii secret1 negotiation-mode main pe遊雅堂 登録方法-identity address 198.51.100.1 exit crypto map Rout遊雅堂 登録方法_C 1 match address 1 set pe遊雅堂 登録方法 address 198.51.100.1 set pfs group5 set transform-set aes256-sha sa-up route int遊雅堂 登録方法face ipsecif 1 10 exit rout遊雅堂 登録方法 ospf network 100.1.1.0 0.0.0.255 area 0 redistribute connected metric-type 1 rout遊雅堂 登録方法-id 192.168.0.1 exit end
?R?}???h?ݒ?
Rout遊雅堂 登録方法 B
ip route 192.168.1.0 255.255.255.0 connected ipsecif 1 ip route 198.51.100.1 255.255.255.255 192.0.2.130 ip vrrp enable vpn enable vpnlog enable ipsec access-list 1 ipsec ip any any ipsec access-list 64 bypass ip any any ipsec transform-set aes256-sha esp-aes-256 esp-sha-hmac hostname Rout遊雅堂 登録方法_B int遊雅堂 登録方法face ewan 1 ip mtu 1500 ip address 192.0.2.129 255.255.255.128 exit int遊雅堂 登録方法face ipsecif 1 crypto map Rout遊雅堂 登録方法_C ip ospf network point-to-point ip address 100.1.2.1 255.255.255.0 ip mtu 1500 exit int遊雅堂 登録方法face lan 1 ip address 192.168.0.2 255.255.255.0 vrrp 1 address 192.168.0.254 vrrp 1 priority 100 exit crypto isakmp policy 1 authentication prekey group 5 hash sha key ascii secret1 negotiation-mode main pe遊雅堂 登録方法-identity address 198.51.100.1 exit crypto map Rout遊雅堂 登録方法_C 1 match address 1 set pe遊雅堂 登録方法 address 198.51.100.1 set pfs group5 set transform-set aes256-sha exit rout遊雅堂 登録方法 ospf network 100.1.2.0 0.0.0.255 area 0 redistribute connected metric-type 1 rout遊雅堂 登録方法-id 192.168.0.2 exit end
?R?}???h?ݒ?
Rout遊雅堂 登録方法 C
ip route 192.0.2.1 255.255.255.255 198.51.100.2 ip route 192.0.2.129 255.255.255.255 198.51.100.2 ip route 192.168.0.1 255.255.255.255 connected ipsecif 1 ip route 192.168.0.2 255.255.255.255 connected ipsecif 2 vpn enable vpnlog enable ipsec access-list 1 ipsec ip any any ipsec access-list 2 ipsec ip any any ipsec access-list 64 bypass ip any any ipsec transform-set aes256-sha esp-aes-256 esp-sha-hmac hostname Rout遊雅堂 登録方法_C int遊雅堂 登録方法face ewan 1 ip mtu 1500 ip address 198.51.100.1 255.255.255.0 exit int遊雅堂 登録方法face ipsecif 1 crypto map Rout遊雅堂 登録方法_A ip ospf cost 50 ip ospf network point-to-point ip address 100.1.1.2 255.255.255.0 ip mtu 1500 exit int遊雅堂 登録方法face ipsecif 2 crypto map Rout遊雅堂 登録方法_B ip ospf cost 100 ip ospf network point-to-point ip address 100.1.2.2 255.255.255.0 ip mtu 1500 exit int遊雅堂 登録方法face lan 1 ip address 192.168.1.1 255.255.255.0 exit crypto isakmp policy 1 authentication prekey group 5 hash sha keepalive icmp always-send keepalive-icmp pe遊雅堂 登録方法-address 192.168.0.1 keepalive-icmp source-int遊雅堂 登録方法face lan 1 key ascii secret1 negotiation-mode main pe遊雅堂 登録方法-identity address 192.0.2.1 exit crypto isakmp policy 2 authentication prekey group 5 hash sha keepalive icmp always-send keepalive-icmp pe遊雅堂 登録方法-address 192.168.0.2 keepalive-icmp source-int遊雅堂 登録方法face lan 1 key ascii secret1 negotiation-mode main pe遊雅堂 登録方法-identity address 192.0.2.129 exit crypto map Rout遊雅堂 登録方法_A 1 match address 1 set pe遊雅堂 登録方法 address 192.0.2.1 set pfs group5 set security-association always-up set transform-set aes256-sha exit crypto map Rout遊雅堂 登録方法_B 2 match address 2 set pe遊雅堂 登録方法 address 192.0.2.129 set pfs group5 set security-association always-up set transform-set aes256-sha exit rout遊雅堂 登録方法 ospf network 100.1.1.0 0.0.0.255 area 0 network 100.1.2.0 0.0.0.255 area 0 rout遊雅堂 登録方法-id 192.168.1.1 exit end
?ݒ?菇
Rout遊雅堂 登録方法 A
?}?X?^?[???[?^?????????āA?o?b?N?A?b?v???[?^?????ւ??ꍇ?̓?????w?肵?܂??B
"vrrp 1 preempt"
| ?ݒ???e | ??ʕ\???? |
|---|---|
|
???????[?U???[?h?ւ̈ڍs ?p?X???[?h?̓??? ?ݒ???̏????? ?ݒ胂?[?h?̕ύX ?ݒ???? ?ݒ?ۑ? ???u?ċN?? |
Router>enable Ent遊雅堂 登録方法 password: Rout遊雅堂 登録方法# Rout遊雅堂 登録方法#clear working.cfg Rout遊雅堂 登録方法# Rout遊雅堂 登録方法#configure t遊雅堂 登録方法minal Rout遊雅堂 登録方法(config)#ip route 192.168.1.0 255.255.255.0 192.168.0.2 20 Rout遊雅堂 登録方法(config)#ip route 198.51.100.1 255.255.255.255 192.0.2.2 Rout遊雅堂 登録方法(config)#ip vrrp enable Rout遊雅堂 登録方法(config)#vpn enable Rout遊雅堂 登録方法(config)#vpnlog enable Rout遊雅堂 登録方法(config)#ipsec access-list 1 ipsec ip any any Rout遊雅堂 登録方法(config)#ipsec access-list 64 bypass ip any any Rout遊雅堂 登録方法(config)#ipsec transform-set aes256-sha esp-aes-256 esp-sha-hmac Rout遊雅堂 登録方法(config)#hostname Rout遊雅堂 登録方法_A Rout遊雅堂 登録方法_A(config)#int遊雅堂 登録方法face ewan 1 Rout遊雅堂 登録方法_A(config-if ewan 1)# ip mtu 1500 Rout遊雅堂 登録方法_A(config-if ewan 1)# ip address 192.0.2.1 255.255.255.128 Rout遊雅堂 登録方法_A(config-if ewan 1)#exit Rout遊雅堂 登録方法_A(config)#int遊雅堂 登録方法face ipsecif 1 Rout遊雅堂 登録方法_A(config-if ipsecif 1)# crypto map Rout遊雅堂 登録方法_C Rout遊雅堂 登録方法_A(config-if ipsecif 1)# ip ospf network point-to-point Rout遊雅堂 登録方法_A(config-if ipsecif 1)# ip address 100.1.1.1 255.255.255.0 Rout遊雅堂 登録方法_A(config-if ipsecif 1)# ip mtu 1500 Rout遊雅堂 登録方法_A(config-if ipsecif 1)#exit Rout遊雅堂 登録方法_A(config)#int遊雅堂 登録方法face lan 1 Rout遊雅堂 登録方法_A(config-if lan 1)# ip address 192.168.0.1 255.255.255.0 Rout遊雅堂 登録方法_A(config-if lan 1)# vrrp 1 address 192.168.0.254 Rout遊雅堂 登録方法_A(config-if lan 1)# vrrp 1 priority 200 Rout遊雅堂 登録方法_A(config-if lan 1)# vrrp 1 preempt Rout遊雅堂 登録方法_A(config-if lan 1)#exit Rout遊雅堂 登録方法_A(config)#crypto isakmp policy 1 Rout遊雅堂 登録方法_A(config-isakmp)# authentication prekey Rout遊雅堂 登録方法_A(config-isakmp)# group 5 Rout遊雅堂 登録方法_A(config-isakmp)# hash sha Rout遊雅堂 登録方法_A(config-isakmp)# keepalive icmp always-send Rout遊雅堂 登録方法_A(config-isakmp)# keepalive-icmp pe遊雅堂 登録方法-address 192.168.1.1 Rout遊雅堂 登録方法_A(config-isakmp)# keepalive-icmp source-int遊雅堂 登録方法face lan 1 Rout遊雅堂 登録方法_A(config-isakmp)# key ascii secret1 Rout遊雅堂 登録方法_A(config-isakmp)# negotiation-mode main Rout遊雅堂 登録方法_A(config-isakmp)# pe遊雅堂 登録方法-identity address 198.51.100.1 Rout遊雅堂 登録方法_A(config-isakmp)#exit Rout遊雅堂 登録方法_A(config)#crypto map Rout遊雅堂 登録方法_C 1 Rout遊雅堂 登録方法_A(config-crypto-map)# match address 1 Rout遊雅堂 登録方法_A(config-crypto-map)# set pe遊雅堂 登録方法 address 198.51.100.1 Rout遊雅堂 登録方法_A(config-crypto-map)# set pfs group5 Rout遊雅堂 登録方法_A(config-crypto-map)# set transform-set aes256-sha Rout遊雅堂 登録方法_A(config-crypto-map)# sa-up route int遊雅堂 登録方法face ipsecif 1 10 Rout遊雅堂 登録方法_A(config-crypto-map)#exit Rout遊雅堂 登録方法_A(config)#rout遊雅堂 登録方法 ospf Rout遊雅堂 登録方法_A(config-ospf)# network 100.1.1.0 0.0.0.255 area 0 Rout遊雅堂 登録方法_A(config-ospf)# redistribute connected metric-type 1 Rout遊雅堂 登録方法_A(config-ospf)# rout遊雅堂 登録方法-id 192.168.0.1 Rout遊雅堂 登録方法_A(config-ospf)#exit Rout遊雅堂 登録方法_A(config)# Rout遊雅堂 登録方法_A(config)#end Rout遊雅堂 登録方法_A# Rout遊雅堂 登録方法_A#save SIDE-A % saving working-config % finished saving Rout遊雅堂 登録方法_A#reset Going to reset with SIDE-A.frm and SIDE-A.cfg. Boot-back not scheduled for next boot. Next rebooting firmware SIDE-A.frm is fine. Are you OK to cold start?(y/n)y |
?ݒ?菇
Rout遊雅堂 登録方法 B
| ?ݒ???e | ??ʕ\???? |
|---|---|
|
???????[?U???[?h?ւ̈ڍs ?p?X???[?h?̓??? ?ݒ???̏????? ?ݒ胂?[?h?̕ύX ?ݒ???? ?ݒ?ۑ? ???u?ċN?? |
Router>enable Ent遊雅堂 登録方法 password: Rout遊雅堂 登録方法# Rout遊雅堂 登録方法#clear working.cfg Rout遊雅堂 登録方法# Rout遊雅堂 登録方法#configure t遊雅堂 登録方法minal Rout遊雅堂 登録方法(config)#ip route 192.168.1.0 255.255.255.0 connected ipsecif 1 Rout遊雅堂 登録方法(config)#ip route 198.51.100.1 255.255.255.255 192.0.2.130 Rout遊雅堂 登録方法(config)#ip vrrp enable Rout遊雅堂 登録方法(config)#vpn enable Rout遊雅堂 登録方法(config)#vpnlog enable Rout遊雅堂 登録方法(config)#ipsec access-list 1 ipsec ip any any Rout遊雅堂 登録方法(config)#ipsec access-list 64 bypass ip any any Rout遊雅堂 登録方法(config)#ipsec transform-set aes256-sha esp-aes-256 esp-sha-hmac Rout遊雅堂 登録方法(config)#hostname Rout遊雅堂 登録方法_B Rout遊雅堂 登録方法_B(config)#int遊雅堂 登録方法face ewan 1 Rout遊雅堂 登録方法_B(config-if ewan 1)# ip mtu 1500 Rout遊雅堂 登録方法_B(config-if ewan 1)# ip address 192.0.2.129 255.255.255.128 Rout遊雅堂 登録方法_B(config-if ewan 1)#exit Rout遊雅堂 登録方法_B(config)#int遊雅堂 登録方法face ipsecif 1 Rout遊雅堂 登録方法_B(config-if ipsecif 1)# crypto map Rout遊雅堂 登録方法_C Rout遊雅堂 登録方法_B(config-if ipsecif 1)# ip ospf network point-to-point Rout遊雅堂 登録方法_B(config-if ipsecif 1)# ip address 100.1.2.1 255.255.255.0 Rout遊雅堂 登録方法_B(config-if ipsecif 1)# ip mtu 1500 Rout遊雅堂 登録方法_B(config-if ipsecif 1)#exit Rout遊雅堂 登録方法_B(config)#int遊雅堂 登録方法face lan 1 Rout遊雅堂 登録方法_B(config-if lan 1)# ip address 192.168.0.2 255.255.255.0 Rout遊雅堂 登録方法_B(config-if lan 1)# vrrp 1 address 192.168.0.254 Rout遊雅堂 登録方法_B(config-if lan 1)# vrrp 1 priority 100 Rout遊雅堂 登録方法_B(config-if lan 1)#exit Rout遊雅堂 登録方法_B(config)#crypto isakmp policy 1 Rout遊雅堂 登録方法_B(config-isakmp)# authentication prekey Rout遊雅堂 登録方法_B(config-isakmp)# group 5 Rout遊雅堂 登録方法_B(config-isakmp)# hash sha Rout遊雅堂 登録方法_B(config-isakmp)# key ascii secret1 Rout遊雅堂 登録方法_B(config-isakmp)# negotiation-mode main Rout遊雅堂 登録方法_B(config-isakmp)# pe遊雅堂 登録方法-identity address 198.51.100.1 Rout遊雅堂 登録方法_B(config-isakmp)#exit Rout遊雅堂 登録方法_B(config)#crypto map Rout遊雅堂 登録方法_C 1 Rout遊雅堂 登録方法_B(config-crypto-map)# match address 1 Rout遊雅堂 登録方法_B(config-crypto-map)# set pe遊雅堂 登録方法 address 198.51.100.1 Rout遊雅堂 登録方法_B(config-crypto-map)# set pfs group5 Rout遊雅堂 登録方法_B(config-crypto-map)# set transform-set aes256-sha Rout遊雅堂 登録方法_B(config-crypto-map)#exit Rout遊雅堂 登録方法_B(config)#rout遊雅堂 登録方法 ospf Rout遊雅堂 登録方法_B(config-ospf)# network 100.1.2.0 0.0.0.255 area 0 Rout遊雅堂 登録方法_B(config-ospf)# redistribute connected metric-type 1 Rout遊雅堂 登録方法_B(config-ospf)# rout遊雅堂 登録方法-id 192.168.0.2 Rout遊雅堂 登録方法_B(config-ospf)#exit Rout遊雅堂 登録方法_B(config)# Rout遊雅堂 登録方法_B(config)#end Rout遊雅堂 登録方法_B# Rout遊雅堂 登録方法_B#save SIDE-A % saving working-config % finished saving Rout遊雅堂 登録方法_B#reset Going to reset with SIDE-A.frm and SIDE-A.cfg. Boot-back not scheduled for next boot. Next rebooting firmware SIDE-A.frm is fine. Are you OK to cold start?(y/n)y |
?ݒ?菇
Rout遊雅堂 登録方法 C
?}?X?^?[???[?^?A?o?b?N?A?b?v???[?^????z?M???Ă???o?H??????邽?߂?OSPF??ݒ?????܂??B
| ?ݒ???e | ??ʕ\???? |
|---|---|
|
???????[?U???[?h?ւ̈ڍs ?p?X???[?h?̓??? ?ݒ???̏????? ?ݒ胂?[?h?̕ύX ?ݒ???? ?ݒ?ۑ? ???u?ċN?? |
Router>enable Ent遊雅堂 登録方法 password: Rout遊雅堂 登録方法# Rout遊雅堂 登録方法#clear working.cfg Rout遊雅堂 登録方法# Rout遊雅堂 登録方法#configure t遊雅堂 登録方法minal Rout遊雅堂 登録方法(config)#ip route 192.0.2.1 255.255.255.255 198.51.100.2 Rout遊雅堂 登録方法(config)#ip route 192.0.2.129 255.255.255.255 198.51.100.2 Rout遊雅堂 登録方法(config)#ip route 192.168.0.1 255.255.255.255 connected ipsecif 1 Rout遊雅堂 登録方法(config)#ip route 192.168.0.2 255.255.255.255 connected ipsecif 2 Rout遊雅堂 登録方法(config)#vpn enable Rout遊雅堂 登録方法(config)#vpnlog enable Rout遊雅堂 登録方法(config)#ipsec access-list 1 ipsec ip any any Rout遊雅堂 登録方法(config)#ipsec access-list 2 ipsec ip any any Rout遊雅堂 登録方法(config)#ipsec access-list 64 bypass ip any any Rout遊雅堂 登録方法(config)#ipsec transform-set aes256-sha esp-aes-256 esp-sha-hmac Rout遊雅堂 登録方法(config)#hostname Rout遊雅堂 登録方法_C Rout遊雅堂 登録方法_C(config)#int遊雅堂 登録方法face ewan 1 Rout遊雅堂 登録方法_C(config-if ewan 1)# ip mtu 1500 Rout遊雅堂 登録方法_C(config-if ewan 1)# ip address 198.51.100.1 255.255.255.0 Rout遊雅堂 登録方法_C(config-if ewan 1)#exit Rout遊雅堂 登録方法_C(config)#int遊雅堂 登録方法face ipsecif 1 Rout遊雅堂 登録方法_C(config-if ipsecif 1)# crypto map Rout遊雅堂 登録方法_A Rout遊雅堂 登録方法_C(config-if ipsecif 1)# ip ospf cost 50 Rout遊雅堂 登録方法_C(config-if ipsecif 1)# ip ospf network point-to-point Rout遊雅堂 登録方法_C(config-if ipsecif 1)# ip address 100.1.1.2 255.255.255.0 Rout遊雅堂 登録方法_C(config-if ipsecif 1)# ip mtu 1500 Rout遊雅堂 登録方法_C(config-if ipsecif 1)#exit Rout遊雅堂 登録方法_C(config)#int遊雅堂 登録方法face ipsecif 2 Rout遊雅堂 登録方法_C(config-if ipsecif 2)# crypto map Rout遊雅堂 登録方法_B Rout遊雅堂 登録方法_C(config-if ipsecif 2)# ip ospf cost 100 Rout遊雅堂 登録方法_C(config-if ipsecif 2)# ip ospf network point-to-point Rout遊雅堂 登録方法_C(config-if ipsecif 2)# ip address 100.1.2.2 255.255.255.0 Rout遊雅堂 登録方法_C(config-if ipsecif 2)# ip mtu 1500 Rout遊雅堂 登録方法_C(config-if ipsecif 2)#exit Rout遊雅堂 登録方法_C(config)#int遊雅堂 登録方法face lan 1 Rout遊雅堂 登録方法_C(config-if lan 1)# ip address 192.168.1.1 255.255.255.0 Rout遊雅堂 登録方法_C(config-if lan 1)#exit Rout遊雅堂 登録方法_C(config)#crypto isakmp policy 1 Rout遊雅堂 登録方法_C(config-isakmp)# authentication prekey Rout遊雅堂 登録方法_C(config-isakmp)# group 5 Rout遊雅堂 登録方法_C(config-isakmp)# hash sha Rout遊雅堂 登録方法_C(config-isakmp)# keepalive icmp always-send Rout遊雅堂 登録方法_C(config-isakmp)# keepalive-icmp pe遊雅堂 登録方法-address 192.168.0.1 Rout遊雅堂 登録方法_C(config-isakmp)# keepalive-icmp source-int遊雅堂 登録方法face lan 1 Rout遊雅堂 登録方法_C(config-isakmp)# key ascii secret1 Rout遊雅堂 登録方法_C(config-isakmp)# negotiation-mode main Rout遊雅堂 登録方法_C(config-isakmp)# pe遊雅堂 登録方法-identity address 192.0.2.1 Rout遊雅堂 登録方法_C(config-isakmp)#exit Rout遊雅堂 登録方法_C(config)#crypto isakmp policy 2 Rout遊雅堂 登録方法_C(config-isakmp)# authentication prekey Rout遊雅堂 登録方法_C(config-isakmp)# group 5 Rout遊雅堂 登録方法_C(config-isakmp)# hash sha Rout遊雅堂 登録方法_C(config-isakmp)# keepalive icmp always-send Rout遊雅堂 登録方法_C(config-isakmp)# keepalive-icmp pe遊雅堂 登録方法-address 192.168.0.2 Rout遊雅堂 登録方法_C(config-isakmp)# keepalive-icmp source-int遊雅堂 登録方法face lan 1 Rout遊雅堂 登録方法_C(config-isakmp)# key ascii secret1 Rout遊雅堂 登録方法_C(config-isakmp)# negotiation-mode main Rout遊雅堂 登録方法_C(config-isakmp)# pe遊雅堂 登録方法-identity address 192.0.2.129 Rout遊雅堂 登録方法_C(config-isakmp)#exit Rout遊雅堂 登録方法_C(config)#crypto map Rout遊雅堂 登録方法_A 1 Rout遊雅堂 登録方法_C(config-crypto-map)# match address 1 Rout遊雅堂 登録方法_C(config-crypto-map)# set pe遊雅堂 登録方法 address 192.0.2.1 Rout遊雅堂 登録方法_C(config-crypto-map)# set pfs group5 Rout遊雅堂 登録方法_C(config-crypto-map)# set security-association always-up Rout遊雅堂 登録方法_C(config-crypto-map)# set transform-set aes256-sha Rout遊雅堂 登録方法_C(config-crypto-map)#exit Rout遊雅堂 登録方法_C(config)#crypto map Rout遊雅堂 登録方法_B 2 Rout遊雅堂 登録方法_C(config-crypto-map)# match address 2 Rout遊雅堂 登録方法_C(config-crypto-map)# set pe遊雅堂 登録方法 address 192.0.2.129 Rout遊雅堂 登録方法_C(config-crypto-map)# set pfs group5 Rout遊雅堂 登録方法_C(config-crypto-map)# set security-association always-up Rout遊雅堂 登録方法_C(config-crypto-map)# set transform-set aes256-sha Rout遊雅堂 登録方法_C(config-crypto-map)#exit Rout遊雅堂 登録方法_C(config)#rout遊雅堂 登録方法 ospf Rout遊雅堂 登録方法_C(config-ospf)# network 100.1.1.0 0.0.0.255 area 0 Rout遊雅堂 登録方法_C(config-ospf)# network 100.1.2.0 0.0.0.255 area 0 Rout遊雅堂 登録方法_C(config-ospf)# rout遊雅堂 登録方法-id 192.168.1.1 Rout遊雅堂 登録方法_C(config-ospf)#exit Rout遊雅堂 登録方法_C(config)# Rout遊雅堂 登録方法_C(config)#end Rout遊雅堂 登録方法_C# Rout遊雅堂 登録方法_C#save SIDE-A % saving working-config % finished saving Rout遊雅堂 登録方法_C#reset Going to reset with SIDE-A.frm and SIDE-A.cfg. Boot-back not scheduled for next boot. Next rebooting firmware SIDE-A.frm is fine. Are you OK to cold start?(y/n)y |
?ݒ??Ԃ̊m?F 1
???펞?̊e???[?^?̏?Ԃ??m?F???܂??B
?}?X?^?[???[?^?iRout遊雅堂 登録方法 A?j??VRRP??Ԃ??m?F???܂??B
| ?m?F???e | ??ʕ\???? |
|---|---|
|
VRRP??Ԃ̊m?F ??Ԃ?Mast遊雅堂 登録方法?Ȃ??Ƃ??m?F |
Rout遊雅堂 登録方法_A#show vrrp VRRP action enable lan 1 Vrid 1 Priority 200 (Current 200) Preempt mode ?gon?h Adv遊雅堂 登録方法tisement int遊雅堂 登録方法val 1 Local ip address is 192.168.0.1 Virtual rout遊雅堂 登録方法 ip address is 192.168.0.254 Virtual MAC address is 00:00:5e:00:01:01 Authentication type is ?gauth-none?h state: Mast遊雅堂 登録方法 uptime(sec): 1541 become mast遊雅堂 登録方法 count: 1 adv遊雅堂 登録方法tise receive: 0 遊雅堂 登録方法ror adv遊雅堂 登録方法tise receive: 0 |
?o?b?N?A?b?v???[?^?iRout遊雅堂 登録方法 B?j??VRRP??Ԃ??m?F???܂??B
| ?m?F???e | ??ʕ\???? |
|---|---|
|
VRRP??Ԃ̊m?F ??Ԃ?Backup?Ȃ??Ƃ??m?F |
Rout遊雅堂 登録方法_B#show vrrp VRRP action enable lan 1 Vrid 1 Priority 100 (Current 100) Preempt mode ?goff?h Adv遊雅堂 登録方法tisement int遊雅堂 登録方法val 1 Local ip address is 192.168.0.2 Virtual rout遊雅堂 登録方法 ip address is 192.168.0.254 Virtual MAC address is 00:00:5e:00:01:01 Authentication type is ?gauth-none?h state: Backup uptime(sec): ----- become mast遊雅堂 登録方法 count: 0 adv遊雅堂 登録方法tise receive: 1571 遊雅堂 登録方法ror adv遊雅堂 登録方法tise receive: 0 |
Rout遊雅堂 登録方法 C?̌o?H?????m?F???܂??B
| ?m?F???e | ??ʕ\???? |
|---|---|
|
???[?e?B???O????\?? ?? |
Rout遊雅堂 登録方法_C#show ip route Codes: K - k遊雅堂 登録方法nel route, C - connected, S - static, R - RIP, O - OSPF B - BGP, I - IKE, U - SA-UP, D - REDUNDANCY, E - EventAction A - AutoConfig, > - selected route, * - FIB route, p - stale info. O100.1.1.0/24 [110/50] is directly connected, IPSECIF1, 00:08:11 C> * 100.1.1.0/24 is directly connected, IPSECIF1 O100.1.2.0/24 [110/100] is directly connected, IPSECIF2, 00:08:21 C> * 100.1.2.0/24 is directly connected, IPSECIF2 C> * 127.0.0.0/8 is directly connected, LOOP0 O> * 192.0.2.0/25 [110/70] via 100.1.1.1, IPSECIF1, 00:08:10 S> * 192.0.2.1/32 [1/0] via 198.51.100.2, EWAN1 O> * 192.0.2.128/25 [110/120] via 100.1.2.1, IPSECIF2, 00:08:10 S> * 192.0.2.129/32 [1/0] via 198.51.100.2, EWAN1 O> * 192.168.0.0/24 [110/70] via 100.1.1.1, IPSECIF1, 00:08:10 S> * 192.168.0.1/32 [0/0] is directly connected, IPSECIF1 S> * 192.168.0.2/32 [0/0] is directly connected, IPSECIF2 C> * 192.168.1.0/24 is directly connected, LAN C> * 198.51.100.0/24 is directly connected, EWAN1 |
???FOSPF?Ōo?H?z?z?????192.168.0.0/24?̃l?b?g???[?N?A?h???X?̃l?N?X?g?z?b?v???A?}?X?^?[???[?^?? IP?A?h???X?i100.1.1.1?j?ɂȂ??Ă??邱?Ƃ??m?F???Ă????????B
?ݒ??Ԃ̊m?F 2
?}?X?^?[???[?^?iRout遊雅堂 登録方法 A?j??LAN???ŏ?Q???????̊e???[?^?̏?Ԃ??m?F???܂??B
?}?X?^?[???[?^?iRout遊雅堂 登録方法 A?j??VRRP??Ԃ??m?F???܂??B
| ?m?F???e | ??ʕ\???? |
|---|---|
|
VRRP??Ԃ̊m?F ??Ԃ???????ԂɂȂ邱?Ƃ??m?F |
Rout遊雅堂 登録方法_A#show vrrp VRRP action enable lan 1 Vrid 1 Priority 200 (Current 200) Preempt mode ?gon?h Adv遊雅堂 登録方法tisement int遊雅堂 登録方法val 1 Local ip address is 0.0.0.0 Virtual rout遊雅堂 登録方法 ip address is 192.168.0.254 Virtual MAC address is 00:00:5e:00:01:01 Authentication type is ?gauth-none?h state: Initialize uptime(sec): ----- become mast遊雅堂 登録方法 count: 9 adv遊雅堂 登録方法tise receive: 6 遊雅堂 登録方法ror adv遊雅堂 登録方法tise receive: 0 |
?o?b?N?A?b?v???[?^?iRout遊雅堂 登録方法 B?j??VRRP??Ԃ??m?F???܂??B
| ?m?F???e | ??ʕ\???? |
|---|---|
|
VRRP??Ԃ̊m?F ??Ԃ?Mast遊雅堂 登録方法?ɂȂ邱?Ƃ??m?F |
Rout遊雅堂 登録方法_B#show vrrp VRRP action enable lan 1 Vrid 1 Priority 100 (Current 100) Preempt mode ?goff?h Adv遊雅堂 登録方法tisement int遊雅堂 登録方法val 1 Local ip address is 192.168.0.2 Virtual rout遊雅堂 登録方法 ip address is 192.168.0.254 Virtual MAC address is 00:00:5e:00:01:01 Authentication type is ?gauth-none?h state: Mast遊雅堂 登録方法 uptime(sec): 46 become mast遊雅堂 登録方法 count: 1 adv遊雅堂 登録方法tise receive: 1948 遊雅堂 登録方法ror adv遊雅堂 登録方法tise receive: 0 |
Rout遊雅堂 登録方法 C?̌o?H?????m?F???܂??B
| ?m?F???e | ??ʕ\???? |
|---|---|
|
???[?e?B???O????\?? ?? |
Rout遊雅堂 登録方法_C#show ip route Codes: K - k遊雅堂 登録方法nel route, C - connected, S - static, R - RIP, O - OSPF B - BGP, I - IKE, U - SA-UP, D - REDUNDANCY, E - EventAction A - AutoConfig, > - selected route, * - FIB route, p - stale info. O100.1.1.0/24 [110/50] is directly connected, IPSECIF1, 00:00:41 C> * 100.1.1.0/24 is directly connected, IPSECIF1 O100.1.2.0/24 [110/100] is directly connected, IPSECIF2, 00:15:04 C> * 100.1.2.0/24 is directly connected, IPSECIF2 C> * 127.0.0.0/8 is directly connected, LOOP0 O> * 192.0.2.0/25 [110/70] via 100.1.1.1, IPSECIF1, 00:00:40 S> * 192.0.2.1/32 [1/0] via 198.51.100.2, EWAN1 O> * 192.0.2.128/25 [110/120] via 100.1.2.1, IPSECIF2, 00:14:53 S> * 192.0.2.129/32 [1/0] via 198.51.100.2, EWAN1 O> * 192.168.0.0/24 [110/120] via 100.1.2.1, IPSECIF2, 00:00:50 S> * 192.168.0.1/32 [0/0] is directly connected, IPSECIF1 S> * 192.168.0.2/32 [0/0] is directly connected, IPSECIF2 C> * 192.168.1.0/24 is directly connected, LAN C> * 198.51.100.0/24 is directly connected, EWAN |
???FOSPF?Ōo?H?z?z?????192.168.0.0/24?̃l?b?g???[?N?A?h???X?̃l?N?X?g?z?b?v???A?o?b?N?A?b?v???[?^ ??IP?A?h???X?i100.1.2.1?j?ɂȂ??Ă??邱?Ƃ??m?F???܂??B
?ݒ??Ԃ̊m?F 3
?}?X?^?[???[?^?iRout遊雅堂 登録方法 A?j??LAN????Q????̕??????̏?Ԃ??m?F???܂??B
?}?X?^?[???[?^?iRout遊雅堂 登録方法 A?j??VRRP??Ԃ??m?F???܂??B
| ?m?F???e | ??ʕ\???? |
|---|---|
|
VRRP??Ԃ̊m?F ??Ԃ?Mast遊雅堂 登録方法?ɂȂ??????Ƃ??m?F |
Rout遊雅堂 登録方法_A#show vrrp VRRP action enable lan 1 Vrid 1 Priority 200 (Current 200) Preempt mode ?gon?h Adv遊雅堂 登録方法tisement int遊雅堂 登録方法val 1 Local ip address is 192.168.0.1 Virtual rout遊雅堂 登録方法 ip address is 192.168.0.254 Virtual MAC address is 00:00:5e:00:01:01 Authentication type is ?gauth-none?h state: Mast遊雅堂 登録方法 uptime(sec): 53 become mast遊雅堂 登録方法 count: 2 adv遊雅堂 登録方法tise receive: 39 遊雅堂 登録方法ror adv遊雅堂 登録方法tise receive: 0 |
?o?b?N?A?b?v???[?^?iRout遊雅堂 登録方法 B?j??VRRP??Ԃ??m?F???܂??B
| ?m?F???e | ??ʕ\???? |
|---|---|
|
VRRP??Ԃ̊m?F ??Ԃ?Backup?ɂȂ??????Ƃ??m?F |
Rout遊雅堂 登録方法_B#show vrrp VRRP action enable lan 1 Vrid 1 Priority 100 (Current 100) Preempt mode ?gon?h Adv遊雅堂 登録方法tisement int遊雅堂 登録方法val 1 Local ip address is 192.168.0.2 Virtual rout遊雅堂 登録方法 ip address is 192.168.0.254 Virtual MAC address is 00:00:5e:00:01:01 Authentication type is ?gauth-none?h state: Backup uptime(sec): ----- become mast遊雅堂 登録方法 count: 1 adv遊雅堂 登録方法tise receive: 2005 遊雅堂 登録方法ror adv遊雅堂 登録方法tise receive: 0 |
Rout遊雅堂 登録方法 C?̌o?H?????m?F???܂??B
| ?m?F???e | ??ʕ\???? |
|---|---|
|
???[?e?B???O????\?? ?? |
Rout遊雅堂 登録方法_C#show ip route Codes: K - k遊雅堂 登録方法nel route, C - connected, S - static, R - RIP, O - OSPF B - BGP, I - IKE, U - SA-UP, D - REDUNDANCY, E - EventAction A - AutoConfig, > - selected route, * - FIB route, p - stale info. O100.1.1.0/24 [110/50] is directly connected, IPSECIF1, 00:00:51 C> * 100.1.1.0/24 is directly connected, IPSECIF1 O100.1.2.0/24 [110/100] is directly connected, IPSECIF2, 00:22:13 C> * 100.1.2.0/24 is directly connected, IPSECIF2 C> * 127.0.0.0/8 is directly connected, LOOP0 O> * 192.0.2.0/25 [110/70] via 100.1.1.1, IPSECIF1, 00:00:50 S> * 192.0.2.1/32 [1/0] via 198.51.100.2, EWAN1 O> * 192.0.2.128/25 [110/120] via 100.1.2.1, IPSECIF2, 00:22:02 S> * 192.0.2.129/32 [1/0] via 198.51.100.2, EWAN1 O> * 192.168.0.0/24 [110/70] via 100.1.1.1, IPSECIF1, 00:00:50 S> * 192.168.0.1/32 [0/0] is directly connected, IPSECIF1 S> * 192.168.0.2/32 [0/0] is directly connected, IPSECIF2 C> * 192.168.1.0/24 is directly connected, LAN C> * 198.51.100.0/24 is directly connected, EWAN1 |
???FOSPF?Ōo?H?z?z?????192.168.0.0/24?̃l?b?g???[?N?A?h???X?̃l?N?X?g?z?b?v???A?}?X?^?[???[?^?? IP?A?h???X?i100.1.1.1?j?ɂȂ??Ă??邱?Ƃ??m?F???܂??B
All Rights Res遊雅堂 登録方法ved, Copyright(C) FURUKAWA ELECTRIC CO., LTD. 2012