Copyright 2025 Fsas Technologies Inc
reference
https://www.fujitsu.com/jp/documents/products/network/router/sir/example/flets/flets_ipsec_internet-guide.pdf

****************************************
 Si-R1 config
****************************************
ether 1 1 vlan untag 1
ether 2 1-4 vlan untag 2
lan 1 ip address 192.168.1.1/24 3
lan 1 vlan 2
remote 0 name internet
remote 0 mtu 1454
remote 0 ap 0 name pppoe
remote 0 ap 0 datalink bind vlan 1
remote 0 ap 0 ppp auth send id-a@isp pwd-a@isp
remote 0 ap 0 keep connect
remote 0 ppp ipcp vjcomp disable
remote 0 ip route 0 default 1 1
remote 0 ip nat mode multi any 1 5m
remote 0 ip filter 0 reject acl 0 out
remote 0 ip filter 1 reject acl 1 out
remote 0 ip filter 2 reject acl 2 out
remote 0 ip filter 3 reject acl 3 out
remote 0 ip msschange 1414
remote 1 name fletsvpn
remote 1 mtu 1454
remote 1 ap 0 name pppoe
remote 1 ap 0 datalink bind vlan 1
remote 1 ap 0 ppp auth send id-a@flets pwd-a@flets
remote 1 ap 0 keep connect
remote 1 ip address local 10.1.1.1
remote 1 ip route 0 10.1.1.2/32 1 1
remote 1 ip nat mode multi 10.1.1.1 1 5m
remote 1 ip nat static 0 10.1.1.1 500 10.1.1.1 500 17
remote 1 ip nat static 1 10.1.1.1 any 10.1.1.1 any 50
remote 1 ip msschange 1414
remote 2 name Si-R2
remote 2 ap 0 name ipsec
remote 2 ap 0 datalink type ipsec
remote 2 ap 0 ipsec type ike
remote 2 ap 0 ipsec ike protocol esp
remote 2 ap 0 ipsec ike encrypt aes-cbc-256
remote 2 ap 0 ipsec ike auth hmac-sha1
remote 2 ap 0 ipsec ike pfs modp1536
remote 2 ap 0 ike shared key text sir2-key
remote 2 ap 0 ike proposal 0 encrypt aes-cbc-256
remote 2 ap 0 tunnel local 10.1.1.1
remote 2 ap 0 tunnel remote 10.1.1.2
remote 2 ap 0 sessionwatch address 192.168.1.1 192.168.2.1
remote 2 ip route 0 192.168.2.0/24 1 1
remote 2 ip msschange 1300
acl 0 ip any any 6 any
acl 0 tcp any 137-139 yes
acl 1 ip any any 17 any
acl 1 udp any 137-139
acl 2 ip any any 6 any
acl 2 tcp any 445 yes
acl 3 ip any any 17 any
acl 3 udp any 445
syslog facility 23
time zone 0900
proxydns domain 0 any * any to 0
proxydns address 0 any to 0
consoleinfo autologout 8h
telnetinfo autologout 5m
terminal charset SJIS


****************************************
 Si-R2 config
****************************************
ether 1 1 vlan untag 1
ether 2 1-4 vlan untag 2
lan 1 ip address 192.168.2.1/24 3
lan 1 vlan 2
remote 0 name internet
remote 0 mtu 1454
remote 0 ap 0 name pppoe
remote 0 ap 0 datalink bind vlan 1
remote 0 ap 0 ppp auth send id-b@isp pwd-b@isp
remote 0 ap 0 keep connect
remote 0 ppp ipcp vjcomp disable
remote 0 ip route 0 default 1 1
remote 0 ip nat mode multi any 1 5m
remote 0 ip filter 0 reject acl 0 out
remote 0 ip filter 1 reject acl 1 out
remote 0 ip filter 2 reject acl 2 out
remote 0 ip filter 3 reject acl 3 out
remote 0 ip msschange 1414
remote 1 name fletsvpn
remote 1 mtu 1454
remote 1 ap 0 name pppoe
remote 1 ap 0 datalink bind vlan 1
remote 1 ap 0 ppp auth send id-b@flets pwd-b@flets
remote 1 ap 0 keep connect
remote 1 ip address local 10.1.1.2
remote 1 ip route 0 10.1.1.1/32 1 1
remote 1 ip nat mode multi 10.1.1.2 1 5m
remote 1 ip nat static 0 10.1.1.2 500 10.1.1.2 500 17
remote 1 ip nat static 1 10.1.1.2 any 10.1.1.2 any 50
remote 1 ip msschange 1414
remote 2 name Si-R1
remote 2 ap 0 name ipsec
remote 2 ap 0 datalink type ipsec
remote 2 ap 0 ipsec type ike
remote 2 ap 0 ipsec ike protocol esp
remote 2 ap 0 ipsec ike encrypt aes-cbc-256
remote 2 ap 0 ipsec ike auth hmac-sha1
remote 2 ap 0 ipsec ike pfs modp1536
remote 2 ap 0 ike shared key text sir2-key
remote 2 ap 0 ike proposal 0 encrypt aes-cbc-256
remote 2 ap 0 tunnel local 10.1.1.2
remote 2 ap 0 tunnel remote 10.1.1.1
remote 2 ap 0 sessionwatch address 192.168.2.1 192.168.1.1
remote 2 ip route 0 192.168.1.0/24 1 1
remote 2 ip msschange 1300
acl 0 ip any any 6 any
acl 0 tcp any 137-139 yes
acl 1 ip any any 17 any
acl 1 udp any 137-139
acl 2 ip any any 6 any
acl 2 tcp any 445 yes
acl 3 ip any any 17 any
acl 3 udp any 445
syslog facility 23
time zone 0900
proxydns domain 0 any * any to 0
proxydns address 0 any to 0
consoleinfo autologout 8h
telnetinfo autologout 5m
terminal charset SJIS