Copyright 2024 Fsas Technologies Inc
reference
https://www.fujitsu.com/jp/documents/products/network/router/sir/example/internet/vpn_datac_backup-guide.pdf

****************************************
 Si-R 1 config
****************************************
ether 1 1 vlan untag 1
ether 1 2 vlan untag 10
ether 2 1-8 vlan untag 2
lan 0 ip address 10.1.1.1/24 3
lan 0 ip ospf use on 0
lan 0 vlan 1
lan 1 ip address 192.168.10.1/24 3
lan 1 vlan 2
lan 2 ip dhcp service client
lan 2 ip route 0 default dhcp 1 1
lan 2 ipv6 use on
lan 2 ipv6 address 0 dhcp@lan2::/64
lan 2 ipv6 route 0 default dhcp 1 1
lan 2 ipv6 dhcp service client
lan 2 ipv6 dhcp client option na off
lan 2 ipv6 dhcp client option pd on
lan 2 vlan 10
remote 0 name dataconn
remote 0 shaping on 64k
remote 0 ap 0 name IPsec
remote 0 ap 0 datalink type dataconnect
remote 0 ap 0 dial 0 number 0222222222
remote 0 ap 0 dial 0 speed 64K
remote 0 ap 0 idle 1m
remote 0 ap 0 ipsec type ikev2
remote 0 ap 0 ipsec ike protocol esp
remote 0 ap 0 ipsec ike encrypt aes-cbc-256
remote 0 ap 0 ipsec ike auth hmac-sha256
remote 0 ap 0 ipsec ike pfs modp1536
remote 0 ap 0 ipsec ike lifetime 1h
remote 0 ap 0 ipsec ike esn disable
remote 0 ap 0 ike local-idtype tel_key_id on
remote 0 ap 0 ike remote-idtype tel_key_id on
remote 0 ap 0 ike name local 0111111111
remote 0 ap 0 ike name remote 0222222222
remote 0 ap 0 ike shared key text sir-key
remote 0 ap 0 ike proposal 0 encrypt aes-cbc-256
remote 0 ap 0 ike proposal 0 hash hmac-sha256
remote 0 ap 0 ike proposal 0 pfs modp1536
remote 0 ap 0 ike proposal 0 prf hmac-sha256
remote 0 ap 0 ike nat-traversal use on
remote 0 ip route 0 192.168.20.0/24 1 130
remote 0 ip msschange 1280
loopback ip address 0 192.168.10.1
routemanage ip redist ospf connected on 20 type2
ospf ip area 0 id 0.0.0.0
syslog facility 23
time zone 0900
consoleinfo autologout 8h
telnetinfo autologout 5m
ngn sip use on
ngn sip bind lan 2
terminal charset SJIS


****************************************
 Si-R 2 config
****************************************
ether 1 1 vlan untag 1
ether 1 2 vlan untag 10
ether 2 1-8 vlan untag 2
lan 0 ip address 10.1.1.2/24 3
lan 0 ip ospf use on 0
lan 0 vlan 1
lan 1 ip address 192.168.20.1/24 3
lan 1 vlan 2
lan 2 ip dhcp service client
lan 2 ip route 0 default dhcp 1 1
lan 2 ipv6 use on
lan 2 ipv6 address 0 dhcp@lan2::/64
lan 2 ipv6 route 0 default dhcp 1 1
lan 2 ipv6 dhcp service client
lan 2 ipv6 dhcp client option na off
lan 2 ipv6 dhcp client option pd on
lan 2 vlan 10
remote 0 name dataconn
remote 0 shaping on 64k
remote 0 ap 0 name IPsec
remote 0 ap 0 datalink type dataconnect
remote 0 ap 0 dial 0 number 0111111111
remote 0 ap 0 dial 0 speed 64K
remote 0 ap 0 idle 1m
remote 0 ap 0 ipsec type ikev2
remote 0 ap 0 ipsec ike protocol esp
remote 0 ap 0 ipsec ike encrypt aes-cbc-256
remote 0 ap 0 ipsec ike auth hmac-sha256
remote 0 ap 0 ipsec ike pfs modp1536
remote 0 ap 0 ipsec ike lifetime 1h
remote 0 ap 0 ipsec ike esn disable
remote 0 ap 0 ike local-idtype tel_key_id on
remote 0 ap 0 ike remote-idtype tel_key_id on
remote 0 ap 0 ike name local 0222222222
remote 0 ap 0 ike name remote 0111111111
remote 0 ap 0 ike shared key text sir-key
remote 0 ap 0 ike proposal 0 encrypt aes-cbc-256
remote 0 ap 0 ike proposal 0 hash hmac-sha256
remote 0 ap 0 ike proposal 0 pfs modp1536
remote 0 ap 0 ike proposal 0 prf hmac-sha256
remote 0 ap 0 ike nat-traversal use on
remote 0 ip route 0 192.168.10.0/24 1 130
remote 0 ip msschange 1280
loopback ip address 0 192.168.20.1
routemanage ip redist ospf connected on 20 type2
ospf ip area 0 id 0.0.0.0
syslog facility 23
time zone 0900
consoleinfo autologout 8h
telnetinfo autologout 5m
ngn sip use on
ngn sip bind lan 2
terminal charset SJIS