#
# ルーターの状態をSORACOM Harvestに送信する
#

#
# NVR700W
#

#
# 内蔵無線WANを使用する設定
#
wwan-module use on

#
# ゲートウェイの設定
#
ip route default gateway pdp wan1

#
# LANインターフェースの設定
# (LANポートを使用)
#
ip lan1 address 192.168.100.1/24

#
# WAN1インターフェースの設定
# (内蔵無線WANを使用)
#
ip wan1 address pdp
ip wan1 secure filter in 300003 300020 300021 300022 300023 300024 300025 300030 300032 300100 300101 300102
ip wan1 secure filter out 300013 300020 300021 300022 300023 300024 300025 300026 300027 300099 dynamic 300080 300081 300082 300083 300084 300085 300098 300099
ip wan1 nat descriptor 1

#
# WWANインターフェースの設定
# (内蔵無線WANを使用)
#
wan1 bind wwan 1
wwan select 1
wwan auth accept chap
wwan auth myname (無線WANのユーザーID) (無線WANの接続パスワード)
wwan disconnect time off
wwan disconnect input time off
wwan disconnect output time off
wwan access-point name (アクセスポイント名)
wwan access limit length off
wwan access limit time off
wwan enable 1

#
# フィルターの設定
#
ip filter 300000 reject 10.0.0.0/8 * * * *
ip filter 300001 reject 172.16.0.0/12 * * * *
ip filter 300002 reject 192.168.0.0/16 * * * *
ip filter 300003 reject 192.168.100.0/24 * * * *
ip filter 300010 reject * 10.0.0.0/8 * * *
ip filter 300011 reject * 172.16.0.0/12 * * *
ip filter 300012 reject * 192.168.0.0/16 * * *
ip filter 300013 reject * 192.168.100.0/24 * * *
ip filter 300020 reject * * udp,tcp 135 *
ip filter 300021 reject * * udp,tcp * 135
ip filter 300022 reject * * udp,tcp netbios_ns-netbios_ssn *
ip filter 300023 reject * * udp,tcp * netbios_ns-netbios_ssn
ip filter 300024 reject * * udp,tcp 445 *
ip filter 300025 reject * * udp,tcp * 445
ip filter 300026 restrict * * tcpfin * www,21,nntp
ip filter 300027 restrict * * tcprst * www,21,nntp
ip filter 300030 pass * 192.168.100.0/24 icmp * *
ip filter 300031 pass * 192.168.100.0/24 established * *
ip filter 300032 pass * 192.168.100.0/24 tcp * ident
ip filter 300033 pass * 192.168.100.0/24 tcp ftpdata *
ip filter 300034 pass * 192.168.100.0/24 tcp,udp * domain
ip filter 300035 pass * 192.168.100.0/24 udp domain *
ip filter 300036 pass * 192.168.100.0/24 udp * ntp
ip filter 300037 pass * 192.168.100.0/24 udp ntp *
ip filter 300099 pass * * * * *
ip filter 500000 restrict * * * * *
ip filter dynamic 300080 * * ftp
ip filter dynamic 300081 * * domain
ip filter dynamic 300082 * * www
ip filter dynamic 300083 * * smtp
ip filter dynamic 300084 * * pop3
ip filter dynamic 300085 * * submission
ip filter dynamic 300098 * * tcp
ip filter dynamic 300099 * * udp

#
# NATの設定
#
nat descriptor type 1 masquerade
nat descriptor address outer 1 primary

#
# DHCPの設定
#
dhcp service server
dhcp server rfc2131 compliant except remain-silent
dhcp scope 1 192.168.100.2-192.168.100.191/24

#
# DNSの設定
#
dns host lan1
dns server pdp wan1
dns private address spoof on

#
# Luaスクリプトのスケジュール設定
#
schedule at 1 startup * lua (Luaスクリプトファイル名)