?É͓d?H?l?b?g???[?N?@??̑????u?????h?@?t?@?C?e???l?b?g
?É͓d?H
遊雅堂 仮想通貨TELnet?g?b?v???i???C???i?b?v?C?x???g???Z?~?i?[?Z?[???X???T?|?[?g
Routing to the Future 遊雅堂 仮想通貨TELnet
???₢???킹?͂?????
?ݒ??
?V?F?[?s???O????
?T?v
gigaethernet 1/1 ????̏o?͂???p?P?b?g?ɑ΂??? 100Mbps ?ŃV?F?[?s???O???s???܂??B
?????ɊeIPsec?g???l?????瑗?M????p?P?b?g??1Mbps ?ɃV?F?[?s???O???s???܂??B
?⑫?E???ӓ_
?\???}
???????
?????C???^?t?F?[?X?? gigaethernet 1/1 ?V?F?[?s???O100000(kbps) shape pir 100000 pbs 4096 ?o?[?X?g?T?C?Y4096(bytes)
?C???^?t?F?[?X?? interface tunnel 1 ?V?F?[?s???O1000(kbps) shape pir 1000 pbs 1024 ?o?[?X?g?T?C?Y1024(bytes)
interface tunnel 2 ?V?F?[?s???O1000(kbps) shape pir 1000 pbs 1024 ?o?[?X?g?T?C?Y1024(bytes)


?R?}???h?ݒ?̗?
?i!?̍s?̓R?????g?ł??B???ۂɓ??͂???K?v?͂???܂???B?j
???̐ݒ?𗘗p??????????
!
!
! ???????[?U???[?h?Ɉڍs???܂??B
!
> enable
password: super ???p?X???[?h????͂??܂??B?i???ۂ͕\??????Ȃ??j
!
!
! ??{?ݒ胂?[?h?Ɉڍs???܂??B
!
#con遊雅堂 仮想通貨gure terminal
!
(con遊雅堂 仮想通貨g)#
!
! Port-channel ?Ƀ??[?J????IP?A?h???X??ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g)#interface Port-channel 2
(con遊雅堂 仮想通貨g-if-ch 2)# ip address 172.16.0.1 255.255.0.0
(con遊雅堂 仮想通貨g-if-ch 2)#exit
!
!
! GigaEthernet ?C???^?t?F?[?X?ɁAport-channel ???????N?t?????܂??B
!
(con遊雅堂 仮想通貨g)#interface GigaEthernet 1/2 *1
(con遊雅堂 仮想通貨g-if-ge 1/2)# channel-group 2
(con遊雅堂 仮想通貨g-if-ge 1/2)#exit
!
!
! Port-channel ?ɃO???[?o????IP?A?h???X??ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g)#interface Port-channel 1
(con遊雅堂 仮想通貨g-if-ch 1)# ip address 192.0.2.1 255.255.255.0
(con遊雅堂 仮想通貨g-if-ch 1)#exit
!
!
! GigaEthernet ?C???^?t?F?[?X?ɁAport-channel ???????N?t?????܂??B
!
(con遊雅堂 仮想通貨g)#interface GigaEthernet 1/1 *1
(con遊雅堂 仮想通貨g-if-ge 1/1)# channel-group 1
(con遊雅堂 仮想通貨g-if-ge 1/1)#exit
!
!
! ?f?t?H???g???[?g??ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g)#ip route 0.0.0.0 0.0.0.0 192.0.2.2
!
!
! VPN?ʐM???쒆?̏ڍׂȃ??O???c???ݒ?ɂ??܂??B
!
(con遊雅堂 仮想通貨g)#crypto isakmp log sa
(con遊雅堂 仮想通貨g)#crypto isakmp log session
(con遊雅堂 仮想通貨g)#crypto isakmp log negotiation-fail
!
! ???? VPN?Z???N?^?̐ݒ???s?Ȃ??܂??B
!
(con遊雅堂 仮想通貨g)#crypto ipsec selector SELECTOR
(con遊雅堂 仮想通貨g-ip-selector)# src 1 ipv4 any
(con遊雅堂 仮想通貨g-ip-selector)# dst 1 ipv4 any
(con遊雅堂 仮想通貨g-ip-selector)#exit
!
!
! ???? DPD?̐ݒ?????܂??B
!
(con遊雅堂 仮想通貨g)#crypto isakmp keepalive
!
!???? ISAKMP ?|???V?[?̐ݒ???s?Ȃ??܂??B
!
(con遊雅堂 仮想通貨g)#crypto isakmp policy P1
(con遊雅堂 仮想通貨g-isakmp)# authentication pre-share
(con遊雅堂 仮想通貨g-isakmp)# encryption aes
(con遊雅堂 仮想通貨g-isakmp)# encryption-keysize aes 256 256 256
(con遊雅堂 仮想通貨g-isakmp)# group 5
(con遊雅堂 仮想通貨g-isakmp)# hash sha
(con遊雅堂 仮想通貨g-isakmp)# initiate-mode main
(con遊雅堂 仮想通貨g-isakmp)#exit
!
!
!???? IPSEC ?|???V?[??ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g)#crypto ipsec policy P2
(conf-ipsec)# set pfs group2
(conf-ipsec)# set security-association lifetime seconds 28800
(conf-ipsec)# set security-association transform-keysize aes 256 256 256
(conf-ipsec)# set security-association transform esp-aes esp-sha-hmac
(conf-ipsec)# set mtu 1500
(conf-ipsec)# set ip df-bit 0
(conf-ipsec)# set ip fragment post
(conf-ipsec)#exit
!
!
! ???_1??????ISAKMP ?v???t?@?C????ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g)#crypto isakmp pro遊雅堂 仮想通貨le PROF0001
(conf-isa-prof)# local-address 100.0.0.1
(conf-isa-prof)# set isakmp-policy P1
(conf-isa-prof)# set ipsec-policy P2
(conf-isa-prof)# set peer 200.0.0.1
(conf-isa-prof)# ike-version 1
(conf-isa-prof)# local-key secret
(conf-isa-prof)#exit
!
!
! ???_2??????ISAKMP ?v???t?@?C????ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g)#crypto isakmp pro遊雅堂 仮想通貨le PROF0002
(conf-isa-prof)# local-address 100.0.0.1
(conf-isa-prof)# set isakmp-policy P1
(conf-isa-prof)# set ipsec-policy P2
(conf-isa-prof)# set peer 200.0.0.2
(conf-isa-prof)# ike-version 1
(conf-isa-prof)# local-key secret
(conf-isa-prof)#exit
!
!
! ???_1??IPsec?p?}?b?v??ݒ肷??B
!
(con遊雅堂 仮想通貨g)#crypto map MAP0001 ipsec-isakmp
(con遊雅堂 仮想通貨g-crypto-map)# match address SELECTOR
(con遊雅堂 仮想通貨g-crypto-map)# set isakmp-pro遊雅堂 仮想通貨le PROF0001
(con遊雅堂 仮想通貨g-crypto-map)#exit
!
!
! ???_2??IPsec?p?}?b?v??ݒ肷??B
!
(con遊雅堂 仮想通貨g)#crypto map MAP1001 ipsec-isakmp
(con遊雅堂 仮想通貨g-crypto-map)# match address SELECTOR
(con遊雅堂 仮想通貨g-crypto-map)# set isakmp-pro遊雅堂 仮想通貨le PROF0002
(con遊雅堂 仮想通貨g-crypto-map)#exit
!
!
! ???_1??tunnel ?C???^?t?F?[?X??IPsec?p?}?b?v??ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g)#interface Tunnel 1
(con遊雅堂 仮想通貨g-if-tun 1)# tunnel mode ipsec map MAP0001
(con遊雅堂 仮想通貨g-if-tun 1)#exit
!
!
! ???_2??tunnel ?C???^?t?F?[?X??IPsec?p?}?b?v??ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g)#interface Tunnel 2
(con遊雅堂 仮想通貨g-if-tun 2)# tunnel mode ipsec map MAP1001
(con遊雅堂 仮想通貨g-if-tun 2)#exit
!
!
! ???_1??tunnel ?C???^?t?F?[?X?̃??[?g??ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g)#ip route 172.17.1.0 255.255.255.0 tunnel 1
!
! ???_2??tunnel ?C???^?t?F?[?X?̃??[?g??ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g)#ip route 172.17.2.0 255.255.255.0 tunnel 2
!
!
!?????C???^?t?F?[?X?̃V?F?[?s???O??ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g)#traf遊雅堂 仮想通貨c-manager extended
(con遊雅堂 仮想通貨g-tm-e)# !
!
!?V?F?[?s???O???????ш??ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g-tm-e)# port pro遊雅堂 仮想通貨le sample
(con遊雅堂 仮想通貨g-tm-e-port sample)#shape pir 100000 pbs 4096
(con遊雅堂 仮想通貨g-tm-e-port sample)# exit
(con遊雅堂 仮想通貨g-tm-e)# !
!
!?V?F?[?s???O???????????C???^?[?t?F?[?X??ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g-tm-e)# port scheduler gigaethernet 1/1 sample
(con遊雅堂 仮想通貨g-tm-e)#exit
!
!
!IPsec?g???l???C???^?t?F?[?X?̃V?F?[?s???O??ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g)#traf遊雅堂 仮想通貨c-manager network
(con遊雅堂 仮想通貨g-tm-n)# !
!
!???[?U???x???X?P?W???[??????ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g-tm-n)# port pro遊雅堂 仮想通貨le tunnel_pro遊雅堂 仮想通貨le
(con遊雅堂 仮想通貨g-tm-n-port tunnel_pro遊雅堂 仮想通貨le)#bandwidth scale 128
(con遊雅堂 仮想通貨g-tm-n-port tunnel_pro遊雅堂 仮想通貨le)# exit
(con遊雅堂 仮想通貨g-tm-n)# !
!
!IPsec?g???l???C???^?[?t?F?[?X?ɃX?P?W???[????ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g-tm-n)# port scheduler tunnel ipsec tunnel_pro遊雅堂 仮想通貨le
(con遊雅堂 仮想通貨g-tm-n)# !
!
!?V?F?[?s???O???????ш??ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g-tm-n)# bandwidth pro遊雅堂 仮想通貨le shape_1M
(con遊雅堂 仮想通貨g-tm-n-bw shape_1M)#shape pir 1000 pbs 1024
(con遊雅堂 仮想通貨g-tm-n-bw shape_1M)# exit
(con遊雅堂 仮想通貨g-tm-n)# !
(con遊雅堂 仮想通貨g-tm-n)#exit
!
!
!???_1?̃V?F?[?s???O?p?}?b?v??ݒ肷??B
!
(con遊雅堂 仮想通貨g)#policy-map tunnel_1
(con遊雅堂 仮想通貨g-pmap tunnel_1)# class class-default
(con遊雅堂 仮想通貨g-pmap-c class-default)#bandwidth pro遊雅堂 仮想通貨le shape_1M
(con遊雅堂 仮想通貨g-pmap-c class-default)# exit
(con遊雅堂 仮想通貨g-pmap tunnel_1)#exit
!
!
!???_2?̃V?F?[?s???O?p?}?b?v??ݒ肷??B
!
(con遊雅堂 仮想通貨g)#policy-map tunnel_2
(con遊雅堂 仮想通貨g-pmap tunnel_2)# class class-default
(con遊雅堂 仮想通貨g-pmap-c class-default)#bandwidth pro遊雅堂 仮想通貨le shape_1M
(con遊雅堂 仮想通貨g-pmap-c class-default)# exit
(con遊雅堂 仮想通貨g-pmap tunnel_2)#exit
!
!
! ???_1??tunnel ?C???^?t?F?[?X?ɃV?F?[?s???O?p?}?b?v??ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g)#interface Tunnel 1
(con遊雅堂 仮想通貨g-if-tun 1)# service-policy output tunnel_1
(con遊雅堂 仮想通貨g-if-tun 1)#exit
!
!
! ???_2??tunnel ?C???^?t?F?[?X?ɃV?F?[?s???O?p?}?b?v??ݒ肵?܂??B
!
(con遊雅堂 仮想通貨g)#interface Tunnel 2
(con遊雅堂 仮想通貨g-if-tun 2)# service-policy output tunnel_2
(con遊雅堂 仮想通貨g-if-tun 2)#exit
!
!
!
! ???????[?U???[?h?ɖ߂?܂??B
!
(con遊雅堂 仮想通貨g)#end
!
!
! ?ݒ??L???ɂ??邽?߂? refresh ?????܂??B
!
#refresh
refresh ok?[y/N]:yes
..................Done


*1:?????|?[?g?ԍ??̐ݒ?
*2:?ݒ?ۑ??ɂ‚??ẮA/drive?z???ɁA?C?ӂ̖??O?ŕۑ????ĉ??????B
#save /drive/[?t?@?C????]

?y?[?W?g?b?v??

遊雅堂 仮想通貨
All Rights Reserved, Copyright(C) FURUKAWA ELECTRIC CO., LTD. 2018
遊雅堂 仮想通貨