UNIVERGE IX2215 の設定。ぷらら光メイト(光クロス)向け、GE0 を ONU と接続、GE1 を LAN に接続する想定。
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
hostname youverge | |
username admin password plain 1 CHANGE_ME administrator | |
service password-encryption | |
ip ufs-cache max-entries 20000 | |
ip ufs-cache enable | |
ip route default Tunnel0.0 | |
ip dhcp enable | |
ip access-list ssh-pass permit tcp src 192.168.3.0/24 dest any dport eq 22 | |
ip access-list ssh-pass deny ip src any dest any | |
ssh-server ip access-list ssh-pass | |
ipv6 ufs-cache max-entries 10000 | |
ipv6 ufs-cache enable | |
ipv6 dhcp enable | |
ipv6 access-list block-list deny ip src any dest any | |
ipv6 access-list dhcpv6-list permit udp src any sport any dest any dport eq 546 | |
ipv6 access-list dhcpv6-list permit udp src any sport any dest any dport eq 547 | |
ipv6 access-list icmpv6-list permit icmp src any dest any | |
ipv6 access-list tunnel-list permit 4 src any dest any | |
ipv6 access-list other-list permit ip src any dest any | |
ipv6 access-list dynamic cache 65535 | |
ipv6 access-list dynamic dflt-list access other-list | |
proxy-dns ip enable | |
proxy-dns ip request both | |
ip dhcp profile dhcpv4-sv | |
dns-server 192.168.3.1 | |
fixed-assignment 192.168.3.2 80:E8:6F:0B:74:7E | |
fixed-assignment 192.168.3.3 80:E8:6F:0B:93:86 | |
ipv6 dhcp client-profile dhcpv6-cl | |
option-request dns-servers | |
ia-pd subscriber GigaEthernet1.0 ::/64 eui-64 | |
ipv6 dhcp server-profile dhcpv6-sv | |
dns-server dhcp | |
interface GigaEthernet0.0 | |
no ip address | |
ipv6 enable | |
ipv6 dhcp client dhcpv6-cl | |
ipv6 filter dhcpv6-list 1 in | |
ipv6 filter icmpv6-list 2 in | |
ipv6 filter tunnel-list 3 in | |
ipv6 filter block-list 100 in | |
ipv6 filter dhcpv6-list 1 out | |
ipv6 filter icmpv6-list 2 out | |
ipv6 filter tunnel-list 3 out | |
ipv6 filter dflt-list 100 out | |
no shutdown | |
interface GigaEthernet1.0 | |
ip address 192.168.3.1/24 | |
ip dhcp binding dhcpv4-sv | |
ipv6 enable | |
ipv6 dhcp server dhcpv6-sv | |
ipv6 nd ra enable | |
ipv6 nd ra other-config-flag | |
ssh-server ip enable | |
no shutdown | |
interface Tunnel0.0 | |
tunnel mode map-e ocn | |
ip address map-e | |
ip tcp adjust-mss auto | |
ip napt enable | |
no shutdown |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment