YAMAHA RTX1200を使ってpptpでVPN接続

投稿者: | 2012年6月4日

先日の記事「http://kkkky.cocolog-nifty.com/bibo/2012/05/yamaha-rtx1200i.html」にPPTPでのVPN接続を追記したいと思います。
赤字の部分が追記部分になります。

自宅(A)のconfig例
(実際はコレにfilterなど追記します)

ip route default gateway pp 1
ip route 192.168.100.0/24 gateway tunnel 1
ip lan1 address 192.168.0.1/24
ip lan1 proxyarp on

pp select 1
pp always-on on
pppoe use lan2
pppoe auto connect on
pppoe auto disconnect on
pppoe disconnect time 600
pp auth accept pap chap
pp auth myname username password
ppp lcp mru on 1454
ppp ipcp ipaddress on
ppp ipcp msext on
ppp ccp type none
ip pp address 10.0.0.1/32
ip pp mtu 1454
ip pp nat descriptor 1
pp enable 1
pp select anonymous
pp name RAS/VPN:
pp bind tunnel 2
pp auth request mschap-v2
pp auth username user pass
ppp ipcp ipaddress on
ppp ccp type mppe-any
ppp ipv6cp use off
ip pp remote address pool dhcp
pptp service type server
pp enable anonymous
tunnel select 2
tunnel encapsulation pptp
pptp tunnel disconnect time off
tunnel enable 2
tunnel select 1
ipsec tunnel 101
ipsec sa policy 101 1 esp 3des-cbc md5-hmac
ipsec ike duration ipsec-sa 1 600
ipsec ike duration isakmp-sa 1 600
ipsec ike keepalive use 1 auto heartbeat 5 2
ipsec ike local address 1 192.168.0.1
ipsec ike pre-shared-key 1 text TestSharedKey
ipsec ike remote address 1 any
ipsec ike remote name 1 TestRemoteName_B
tunnel enable 2
nat descriptor type 1 nat-masquerade
nat descriptor address outer 1 ipcp
nat descriptor address inner 1 auto
nat descriptor masquerade incoming 1 reject
nat descriptor masquerade static 1 1 192.168.0.1 udp 500
nat descriptor masquerade static 1 2 192.168.0.1 esp
nat descriptor masquerade static 1 3 192.168.110.1 tcp 1723
nat descriptor masquerade static 1 4 192.168.110.1 gre
ipsec ike duration isakmp-sa 514 600
dhcp service server
dhcp scope 1 192.168.0.2-192.168.0.63/24
dns server pp 1
dns private address spoof on
pptp service on

コメントを残す

メールアドレスが公開されることはありません。 が付いている欄は必須項目です