Copyright 2024 Fsas Technologies Inc

reference
https://www.fujitsu.com/jp/documents/products/network/router/sir/example/internet-vpn/vpn_datac_nat-guide.pdf

****************************************
 Si-R 1 config
****************************************

ether 1 1 vlan untag 1001
ether 2 1-4 vlan untag 1002
lan 0 ip dhcp service client
lan 0 ip route 0 default dhcp 1 1
lan 0 ipv6 use on
lan 0 ipv6 address 0 dhcp@lan0::/64
lan 0 ipv6 route 0 default dhcp 1 1
lan 0 ipv6 dhcp service client
lan 0 ipv6 dhcp client option na off
lan 0 ipv6 dhcp client option pd on
lan 0 vlan 1001
lan 1 ip address 192.168.2.254/24 3
lan 1 vlan 1002
remote 1 name dataconn
remote 1 shaping on 64k
remote 1 ap 0 name IPsec
remote 1 ap 0 datalink type dataconnect
remote 1 ap 0 dial 0 number 0222222222
remote 1 ap 0 dial 0 speed 64K
remote 1 ap 0 idle 1m
remote 1 ap 0 ipsec type ikev2
remote 1 ap 0 ipsec ike protocol esp
remote 1 ap 0 ipsec ike encrypt aes-cbc-256
remote 1 ap 0 ipsec ike auth hmac-sha256
remote 1 ap 0 ipsec ike pfs modp2048
remote 1 ap 0 ipsec ike lifetime 1h
remote 1 ap 0 ipsec ike esn disable
remote 1 ap 0 ike local-idtype tel_key_id on
remote 1 ap 0 ike remote-idtype tel_key_id on
remote 1 ap 0 ike name local 0111111111
remote 1 ap 0 ike name remote 0222222222
remote 1 ap 0 ike shared key text sir2-key
remote 1 ap 0 ike proposal 0 encrypt aes-cbc-256
remote 1 ap 0 ike proposal 0 hash hmac-sha256
remote 1 ap 0 ike proposal 0 pfs modp2048
remote 1 ap 0 ike proposal 0 prf hmac-sha256
remote 1 ap 0 ike nat-traversal use on
remote 1 ip route 0 172.16.1.0/24 1 1
remote 1 ip priority 0 any any any any any any express
remote 1 ip msschange 1280
syslog pri error,warn,info
syslog facility 23
time auto server 0.0.0.0 dhcp
time zone 0900
consoleinfo autologout 8h
telnetinfo autologout 5m
loopback ip address 0 192.168.2.254
ngn sip use on
ngn sip bind lan 0
terminal charset SJIS


****************************************
 Si-R 2 config
****************************************

ether 1 1 vlan untag 1001
ether 2 1-4 vlan untag 1002
lan 0 ip dhcp service client
lan 0 ip dhcp client option router off
lan 0 ipv6 use on
lan 0 ipv6 address 0 dhcp@lan0::/64
lan 0 ipv6 route 0 default dhcp 1 1
lan 0 ipv6 dhcp service client
lan 0 ipv6 dhcp client option na off
lan 0 ipv6 dhcp client option pd on
lan 0 vlan 1001
lan 1 ip address 192.168.2.1/24 3
lan 1 vlan 1002
remote 1 name dataconn
remote 1 shaping on 64k
remote 1 ap 0 name IPsec
remote 1 ap 0 datalink type dataconnect
remote 1 ap 0 dial 0 number 0111111111
remote 1 ap 0 dial 0 speed 64K
remote 1 ap 0 idle 1m
remote 1 ap 0 ipsec type ikev2
remote 1 ap 0 ipsec ike protocol esp
remote 1 ap 0 ipsec ike encrypt aes-cbc-256
remote 1 ap 0 ipsec ike auth hmac-sha256
remote 1 ap 0 ipsec ike pfs modp2048
remote 1 ap 0 ipsec ike lifetime 1h
remote 1 ap 0 ipsec ike esn disable
remote 1 ap 0 ike local-idtype tel_key_id on
remote 1 ap 0 ike remote-idtype tel_key_id on
remote 1 ap 0 ike name local 0222222222
remote 1 ap 0 ike name remote 0111111111
remote 1 ap 0 ike shared key text sir2-key
remote 1 ap 0 ike proposal 0 encrypt aes-cbc-256
remote 1 ap 0 ike proposal 0 hash hmac-sha256
remote 1 ap 0 ike proposal 0 pfs modp2048
remote 1 ap 0 ike proposal 0 prf hmac-sha256
remote 1 ap 0 ike nat-traversal use on
remote 1 ip route 0 172.16.2.0/24 1 1
remote 1 ip nat mode static 10.1.1.1 1 5m
remote 1 ip nat static 0 192.168.2.1 any 172.16.1.1-172.16.1.254 any any
remote 1 ip nat destination 0 172.16.2.1 192.168.2.1-192.168.2.254
remote 1 ip priority 0 any any any any any any express
remote 1 ip msschange 1280
syslog pri error,warn,info
syslog facility 23
time auto server 0.0.0.0 dhcp
time zone 0900
consoleinfo autologout 8h
telnetinfo autologout 5m
loopback ip address 0 192.168.2.1
ngn sip use on
ngn sip bind lan 0
terminal charset SJIS