# # v6プラスでインターネット接続 # # # ひかり電話契約あり # IPv6/IPv4インターネットサービス (動的IPサービス) の場合 # # # ゲートウェイの設定 # ip route default gateway tunnel 1 ipv6 route default gateway dhcp lan2 # # LANインターフェースの設定(LAN1ポートを使用) # ip lan1 address 192.168.100.1/24 # # WANインターフェースの設定(LAN2ポートを使用) # ipv6 prefix 1 dhcp-prefix@lan2::/64 ipv6 lan1 address dhcp-prefix@lan2::1/64 ipv6 lan1 rtadv send 1 o_flag=on ipv6 lan1 dhcp service server ipv6 lan2 dhcp service client ipv6 lan2 address dhcp ipv6 lan2 secure filter in 200030 200031 200038 200039 ipv6 lan2 secure filter out 200099 dynamic 200080 200081 200082 200083 200084 200098 200099 ngn type lan2 ntt # # トンネルの設定 # tunnel select 1 tunnel encapsulation map-e tunnel map-e type v6plus ip tunnel mtu 1460 ip tunnel secure filter in 200030 200039 ip tunnel secure filter out 200099 dynamic 200080 200082 200083 200084 200098 200099 ip tunnel nat descriptor 1000 tunnel enable 1 # # フィルターの設定 # ip filter 200030 pass * 192.168.100.0/24 icmp * * ip filter 200039 reject * * ip filter 200099 pass * * * * * ip filter dynamic 200080 * * ftp ip filter dynamic 200082 * * www ip filter dynamic 200083 * * smtp ip filter dynamic 200084 * * pop3 ip filter dynamic 200098 * * tcp ip filter dynamic 200099 * * udp ipv6 filter 200030 pass * * icmp6 * * ipv6 filter 200031 pass * * 4 ipv6 filter 200038 pass * * udp * 546 ipv6 filter 200039 reject * * ipv6 filter 200099 pass * * * * * ipv6 filter dynamic 200080 * * ftp ipv6 filter dynamic 200081 * * domain ipv6 filter dynamic 200082 * * www ipv6 filter dynamic 200083 * * smtp ipv6 filter dynamic 200084 * * pop3 ipv6 filter dynamic 200098 * * tcp ipv6 filter dynamic 200099 * * udp # # NATの設定 # nat descriptor type 1000 masquerade nat descriptor address outer 1000 map-e # # DHCPの設定 # dhcp service server dhcp server rfc2131 compliant except remain-silent dhcp scope 1 192.168.100.2-192.168.100.191/24 # # DNSの設定 # dns host lan1 dns service fallback on dns server dhcp lan2 # # 電話の設定 # sip use on