Skip to content

Instantly share code, notes, and snippets.

@Kuniwak
Last active April 3, 2023 10:51
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Kuniwak/f946d14668fcc2272d50540a62795602 to your computer and use it in GitHub Desktop.
Save Kuniwak/f946d14668fcc2272d50540a62795602 to your computer and use it in GitHub Desktop.
UNIVERGE IX2215 の設定。ぷらら光メイト(光クロス)向け、GE0 を ONU と接続、GE1 を LAN に接続する想定。
hostname youverge
username admin password plain 1 CHANGE_ME administrator
service password-encryption
ip ufs-cache max-entries 20000
ip ufs-cache enable
ip route default Tunnel0.0
ip dhcp enable
ip access-list ssh-pass permit tcp src 192.168.3.0/24 dest any dport eq 22
ip access-list ssh-pass deny ip src any dest any
ssh-server ip access-list ssh-pass
ipv6 ufs-cache max-entries 10000
ipv6 ufs-cache enable
ipv6 dhcp enable
ipv6 access-list block-list deny ip src any dest any
ipv6 access-list dhcpv6-list permit udp src any sport any dest any dport eq 546
ipv6 access-list dhcpv6-list permit udp src any sport any dest any dport eq 547
ipv6 access-list icmpv6-list permit icmp src any dest any
ipv6 access-list tunnel-list permit 4 src any dest any
ipv6 access-list other-list permit ip src any dest any
ipv6 access-list dynamic cache 65535
ipv6 access-list dynamic dflt-list access other-list
proxy-dns ip enable
proxy-dns ip request both
ip dhcp profile dhcpv4-sv
dns-server 192.168.3.1
fixed-assignment 192.168.3.2 80:E8:6F:0B:74:7E
fixed-assignment 192.168.3.3 80:E8:6F:0B:93:86
ipv6 dhcp client-profile dhcpv6-cl
option-request dns-servers
ia-pd subscriber GigaEthernet1.0 ::/64 eui-64
ipv6 dhcp server-profile dhcpv6-sv
dns-server dhcp
interface GigaEthernet0.0
no ip address
ipv6 enable
ipv6 dhcp client dhcpv6-cl
ipv6 filter dhcpv6-list 1 in
ipv6 filter icmpv6-list 2 in
ipv6 filter tunnel-list 3 in
ipv6 filter block-list 100 in
ipv6 filter dhcpv6-list 1 out
ipv6 filter icmpv6-list 2 out
ipv6 filter tunnel-list 3 out
ipv6 filter dflt-list 100 out
no shutdown
interface GigaEthernet1.0
ip address 192.168.3.1/24
ip dhcp binding dhcpv4-sv
ipv6 enable
ipv6 dhcp server dhcpv6-sv
ipv6 nd ra enable
ipv6 nd ra other-config-flag
ssh-server ip enable
no shutdown
interface Tunnel0.0
tunnel mode map-e ocn
ip address map-e
ip tcp adjust-mss auto
ip napt enable
no shutdown
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment