質問編集履歴

1

ソースコードをあげました。

2016/10/20 13:41

投稿

kudomasa
kudomasa

スコア13

test CHANGED
File without changes
test CHANGED
@@ -20,6 +20,176 @@
20
20
 
21
21
 
22
22
 
23
+ ip route default gateway pp 1 filter 100000 gateway pp 2 filter 100001 gateway pp 2 filter 100002
24
+
25
+ ip lan1 address 192.168.0.2/24
26
+
27
+
28
+
29
+ ip lan1 secure filter in 100010 100011 100012 100013 100014 100015 100016 100017 100018 100019 100121 100020 500000
30
+
31
+
32
+
33
+ switch control use lan1 on
34
+
35
+ switch control use lan2 on
36
+
37
+ pp select 1
38
+
39
+ description pp プロバイダ1
40
+
41
+ pp keepalive interval 30 retry-interval=30 count=12
42
+
43
+ pp always-on on
44
+
45
+ pppoe use lan2
46
+
47
+ pppoe auto disconnect off
48
+
49
+ pp auth accept pap chap
50
+
51
+ pp auth myname プロバイダ情報
52
+
53
+ ppp lcp mru on 1454
54
+
55
+ ppp ipcp ipaddress on
56
+
57
+ ppp ipcp msext on
58
+
59
+ ppp ccp type none
60
+
61
+ ip pp secure filter in 200100 200200 500000
62
+
63
+ ip pp nat descriptor 1000
64
+
65
+ pp enable 1
66
+
67
+ pp select 2
68
+
69
+ description pp プロバイダ2
70
+
71
+ pp keepalive interval 30 retry-interval=30 count=12
72
+
73
+ pp always-on on
74
+
75
+ pppoe use lan2
76
+
77
+ pppoe auto disconnect off
78
+
79
+ pp auth accept pap chap
80
+
81
+ pp auth myname プロバイダ情報
82
+
83
+ ppp lcp mru on 1454
84
+
85
+ ppp ipcp ipaddress on
86
+
87
+ ppp ipcp msext on
88
+
89
+ ppp ccp type none
90
+
91
+ ip pp address 固定IP
92
+
93
+ ip pp nat descriptor 2000
94
+
95
+ pp enable 2
96
+
97
+ ip filter 100000 pass 192.168.0.11-192.168.0.49 * * *
98
+
99
+ ip filter 100001 pass 192.168.0.50-192.168.0.59 * * *
100
+
101
+ ip filter 100002 pass 192.168.0.60-192.168.0.99 * * *
102
+
103
+ ip filter 100010 reject * * udp,tcp 135 *
104
+
105
+ ip filter 100011 reject * * udp,tcp * 135
106
+
107
+ ip filter 100012 reject * * udp,tcp netbios_ns-netbios_dgm *
108
+
109
+ ip filter 100013 reject * * udp,tcp * netbios_ns-netbios_dgm
110
+
111
+ ip filter 100014 reject * * udp,tcp netbios_ssn *
112
+
113
+ ip filter 100015 reject * * udp,tcp * netbios_ssn
114
+
115
+ ip filter 100016 reject * * udp,tcp 445 *
116
+
117
+ ip filter 100017 reject * * udp,tcp * 445
118
+
119
+ ip filter 100018 pass * * tcp * www
120
+
121
+ ip filter 100019 pass * * udp,tcp 46100-46122 *
122
+
123
+ ip filter 100020 pass * * udp,tcp * 1547
124
+
125
+ ip filter 100121 pass * 192.168.0.63 udp * 46100-46122
126
+
127
+ ip filter 200100 pass * 192.168.0.63 udp 46100-46122 46100-46122
128
+
129
+ ip filter 201100 pass * * udp * 1547,46100-46122
130
+
131
+ ip filter 201101 pass 固定IP * * 1547,46100-46122 *
132
+
133
+ ip filter 201102 pass * * udp * 1547,46100-46122
134
+
135
+ ip filter 500000 restrict * * * * *
136
+
137
+ ip filter dynamic 100100 * 192.168.0.63 udp
138
+
139
+ nat descriptor type 1000 masquerade
140
+
141
+ nat descriptor address outer 1000 ipcp
142
+
143
+ nat descriptor address inner 1000 auto
144
+
145
+ nat descriptor masquerade incoming 1000 reject
146
+
147
+ nat descriptor type 2000 masquerade
148
+
149
+ nat descriptor address outer 2000 固定IP
150
+
151
+ nat descriptor address inner 2000 auto
152
+
153
+ nat descriptor masquerade incoming 2000 discard
154
+
155
+ nat descriptor type 3000 nat
156
+
157
+ nat descriptor address outer 3000 ipcp
158
+
159
+ nat descriptor address inner 3000 auto
160
+
161
+ nat descriptor static 3000 500010 固定IP=192.168.0.60/28
162
+
163
+ nat descriptor masquerade incoming 3000 through
164
+
165
+ dhcp service server
166
+
167
+ dhcp server rfc2131 compliant except remain-silent
168
+
169
+ dhcp scope 1 192.168.0.11-192.168.0.125/24 expire 3:00
170
+
171
+ dhcp scope bind 1 IP ethernet MAC
172
+
173
+ dns host lan1
174
+
175
+ dns server pp 1
176
+
177
+ dns server select 500001 pp 1 any . restrict pp 1
178
+
179
+ dns server select 500002 pp 2 any . restrict pp 2
180
+
181
+ dns private address spoof on
182
+
183
+ upnp use on
184
+
185
+ upnp external address refer lan2
186
+
187
+ dashboard accumulate traffic on
188
+
189
+ dashboard accumulate nat on
190
+
191
+
192
+
23
193
  ###試したこと
24
194
 
25
195
  IPマスカレードで固定IPを設定して、その他の設定をしないで稼働すると端末ではWebを見る事ができました。
@@ -27,3 +197,7 @@
27
197
 
28
198
 
29
199
  ###補足情報(言語/FW/ツール等のバージョンなど)
200
+
201
+
202
+
203
+ 記述後、コマンドで流し込んだ後パネルから変更をかけたりして汚くなってまってます、すいません。