�Z���^�[���͌��v���~�A���ȊO�̃T�[�r�X��
�g�����ݒ����쐬���Ă݂܂����B
���@�������Ă��Ȃ��̂œ��쌟���Ă��܂���B
�Q�l���x�ɂ��Ă����ĉ������B�܂��ԈႢ�Ȃǂ�
�L��܂�����w�E���ĉ������B
CTU��DHCP���������A�h���X�͌��݂̎d�l�ł�
192.168.24.50����ł��̂�2-49�͌Œ�Ŏg��
�܂��B
�܂�CTU�̐ÓI�A�h���X�ϊ���UDP500��
192.168.24.2�Ƀt�H���[�f�B���O����
�悤�ɐݒ��ύX���Ă����B
�t�@�C�A�[�E�H�[���ڍאݒ��UDP500��
�o�����ŋ�����ݒ�����Ă����B
�l�b�g���[�N�\��
�i����邩������܂���j
�Z���^�[��
192.168.0.0/24
�@|
�@�@�@�@ |
+--------+--------+
| RTX1100 |
+--------+--------+
| 200.1.1.1/32
�@�@�@�@ |
�@�@�@�@ |internet
�@�@�@�@ |
+--------+--------+
| CTU�@�@ |
+--------+--------+
| 192.168.24.1/24
�@�@�@�@ |
�@�@�@�@ | 192.168.24.2/24
+--------+--------+
| RTX1100 |
+--------+--------+
�@|
�@�@�@�@ |
192.168.1.0/24
���v���~�A����
�Œ�IP���̐ݒ��
#
# LAN1 interface
#
ip lan1 address 192.168.0.1/24
#
# PP interface
#
pp select 1
pppoe use lan2
pp always-on on
ppp lcp mru on 1454
ip pp mtu 1454
ip route default gateway pp 1
ppp ccp type none
pp auth accept pap chap
pp auth myname NAME PASSWORD
ip pp address 200.1.1.1
ip pp nat descriptor 1
pp enable 1
#
# IKE
#
ipsec auto refresh on
ipsec ike esp-encapsulation 1 on
ipsec ike remote address 1 any
ipsec ike pre-shared-key 1 text prekey
ipsec ike remote name 1 cturtx
ipsec sa policy 101 1 esp aes-cbc sha1-hmac
#
# TUNNEL interface
#
tunnel select 1
ipsec tunnel 101
ip route 192.168.1.0/24 gateway tunnel 1
tunnel enable 1
#
# NAT descriptor
#
nat descriptor type 1 masquerade
nat descriptor address outer 1 200.1.1.1
nat descriptor address inner 1 200.1.1.1 192.168.0.1-192.168.0.254
nat descriptor masquerade static 1 1 200.1.1.1 udp 500
nat descriptor masquerade static 1 2 200.1.1.1 esp *
���v���~�A�����̐ݒ��
#
# LAN1 interface
#
ip lan1 address 192.168.1.1/24
#
# LAN2 interface
#
ip lan2 address 192.168.24.2/24
ip lan2 nat descriptor 1
#
#�f�t�H���g���[�g��CTU��
ip route default gateway 192.168.24.1
#
# IKE
#
ipsec auto refresh on
ipsec ike remote address 1 200.1.1.1
ipsec ike duration ipsec-sa 1 300
ipsec ike duration isakmp-sa 1 300
ipsec ike local name 1 cturtx key-id
ipsec ike esp-encapsulation 1 on
ipsec ike pre-shared-key 1 text prekey
ipsec sa policy 101 1 esp aes-cbc sha1-hmac
#
# TUNNEL interface
#
tunnel select 1
ipsec tunnel 101
ip route 192.168.0.0/24 gateway tunnel 1
tunnel enable 1
#
# NAT descriptor
#
nat descriptor type 1 nat-masquerade
nat descriptor address outer 1 192.168.24.2
nat descriptor address inner 1 192.168.1.1-192.168.1.254
nat descriptor masquerade static 1 1 192.168.24.2 udp 500
nat descriptor masquerade static 1 2 192.168.24.2 esp *