Copyright 2024 Fsas Technologies Inc

reference
https://www.fujitsu.com/jp/documents/products/network/router/sir/example/internet-vpn/vpn_eoip-guide.pdf

****************************************
 Si-R 1 config
****************************************

ethergroup 2 vlan mode disable
ethergroup 2 bridgegroup use on
ether 1 1 vlan untag 1
lan 1 ip address 192.168.1.1/24 3
lan 1 ip proxyarp off
lan 1 vlan 0
remote 0 name internet
remote 0 mtu 1454
remote 0 ap 0 name pppoe
remote 0 ap 0 datalink bind vlan 1
remote 0 ap 0 ppp auth send id-a@isp pwd-a@isp
remote 0 ap 0 keep connect
remote 0 ppp ipcp vjcomp disable
remote 0 ip address local 203.0.113.1
remote 0 ip route 0 default 1 1
remote 0 ip nat mode multi 203.0.113.1 1 5m
remote 0 ip nat static 0 203.0.113.1 500 203.0.113.1 500 17
remote 0 ip nat static 1 203.0.113.1 any 203.0.113.1 any 50
remote 0 ip msschange 1414
remote 1 name Si-RG_2
remote 1 ap 0 name ipsec
remote 1 ap 0 datalink type ipsec
remote 1 ap 0 ipsec type ike
remote 1 ap 0 ipsec ike protocol esp
remote 1 ap 0 ipsec ike encrypt aes-cbc-256
remote 1 ap 0 ipsec ike auth hmac-sha256
remote 1 ap 0 ipsec ike pfs modp1536
remote 1 ap 0 ike name remote sir2
remote 1 ap 0 ike shared key text sir2-key
remote 1 ap 0 ike proposal 0 encrypt aes-cbc-256
remote 1 ap 0 ike proposal 0 hash hmac-sha256
remote 1 ap 0 ike proposal 0 pfs modp1536
remote 1 ap 0 tunnel local 203.0.113.1
remote 1 ap 0 sessionwatch address 172.16.1.1 172.16.1.2
remote 1 ip route 0 172.16.1.2/32 1 1
remote 10 name Si-RG_22
remote 10 ap 0 name ethip
remote 10 ap 0 datalink type ip
remote 10 ap 0 tunnel local 172.16.1.1
remote 10 ap 0 tunnel remote 172.16.1.2
remote 10 bridgegroup use on
bridgegroup 0 ip routing off
bridgegroup 0 ip policy loose
bridgegroup 0 ipv6 routing off
bridgegroup 0 vlan tag transmit on
syslog facility 23
time zone 0900
consoleinfo autologout 15m
telnetinfo autologout 5m
loopback ip address 0 172.16.1.1
terminal charset SJIS


****************************************
 Si-R 2 config
****************************************

ethergroup 2 vlan mode disable
ethergroup 2 bridgegroup use on
ether 1 1 vlan untag 1
lan 1 ip address 192.168.1.2/24 3
lan 1 ip proxyarp off
lan 1 vlan 0
remote 0 name internet
remote 0 mtu 1454
remote 0 ap 0 name pppoe
remote 0 ap 0 datalink bind vlan 1
remote 0 ap 0 ppp auth send id-b@isp pwd-b@isp
remote 0 ap 0 keep connect
remote 0 ppp ipcp vjcomp disable
remote 0 ip route 0 203.0.113.1/32 1 1
remote 0 ip nat mode multi any 1 5m
remote 0 ip nat static 0 172.16.1.2 500 any 500 17
remote 0 ip nat static 1 172.16.1.2 any any any 50
remote 0 ip msschange 1414
remote 1 name Si-RG_1
remote 1 ap 0 name ipsec
remote 1 ap 0 datalink type ipsec
remote 1 ap 0 ipsec type ike
remote 1 ap 0 ipsec ike protocol esp
remote 1 ap 0 ipsec ike encrypt aes-cbc-256
remote 1 ap 0 ipsec ike auth hmac-sha256
remote 1 ap 0 ipsec ike pfs modp1536
remote 1 ap 0 ike name local sir2
remote 1 ap 0 ike shared key text sir2-key
remote 1 ap 0 ike proposal 0 encrypt aes-cbc-256
remote 1 ap 0 ike proposal 0 hash hmac-sha256
remote 1 ap 0 ike proposal 0 pfs modp1536
remote 1 ap 0 tunnel remote 203.0.113.1
remote 1 ap 0 sessionwatch address 172.16.1.2 172.16.1.1
remote 1 ip route 0 172.16.1.1/32 1 1
remote 10 name Si-RG_11
remote 10 ap 0 name ethip
remote 10 ap 0 datalink type ip
remote 10 ap 0 tunnel local 172.16.1.2
remote 10 ap 0 tunnel remote 172.16.1.1
remote 10 bridgegroup use on
bridgegroup 0 ip routing off
bridgegroup 0 ip policy loose
bridgegroup 0 ipv6 routing off
bridgegroup 0 vlan tag transmit on
syslog facility 23
time zone 0900
consoleinfo autologout 15m
telnetinfo autologout 5m
loopback ip address 0 172.16.1.2
terminal charset SJIS