Copyright 2024 Fsas Technologies Inc reference https://www.fujitsu.com/jp/documents/products/network/router/sir/example/internet-vpn/vpn_eoip_backup-guide.pdf **************************************** Si-R 1 config **************************************** ethergroup 2 vlan mode disable ethergroup 2 bridgegroup use on ether 1 1 vlan untag 1 lan 1 ip address 192.168.1.1/24 3 lan 1 ip proxyarp off lan 1 vrrp use on lan 1 vrrp group 0 id 1 254 192.168.1.254 lan 1 vrrp group 0 trigger 0 ifdown rmt1 200 lan 1 vrrp group 0 action 0 master online remote 10 lan 1 vrrp group 0 action 1 backup offline remote 10 lan 1 vrrp group 0 vaddr icmp accept lan 1 vrrp group 0 vaddr etherip accept lan 1 vlan 0 remote 0 name internet remote 0 mtu 1454 remote 0 ap 0 name pppoe remote 0 ap 0 datalink bind vlan 1 remote 0 ap 0 ppp auth send id-a@isp pwd-a@isp remote 0 ap 0 keep connect remote 0 ppp ipcp vjcomp disable remote 0 ip address local 203.0.113.1 remote 0 ip route 0 default 1 1 remote 0 ip nat mode multi 203.0.113.1 1 5m remote 0 ip nat static 0 203.0.113.1 500 203.0.113.1 500 17 remote 0 ip nat static 1 203.0.113.1 any 203.0.113.1 any 50 remote 0 ip msschange 1414 remote 1 name Si-RG_2 remote 1 ap 0 name ipsec remote 1 ap 0 datalink type ipsec remote 1 ap 0 ipsec type ike remote 1 ap 0 ipsec ike protocol esp remote 1 ap 0 ipsec ike encrypt aes-cbc-256 remote 1 ap 0 ipsec ike auth hmac-sha256 remote 1 ap 0 ipsec ike pfs modp1536 remote 1 ap 0 ike name remote sir2 remote 1 ap 0 ike shared key text sir2-key remote 1 ap 0 ike proposal 0 encrypt aes-cbc-256 remote 1 ap 0 ike proposal 0 hash hmac-sha256 remote 1 ap 0 ike proposal 0 pfs modp1536 remote 1 ap 0 tunnel local 203.0.113.1 remote 1 ap 0 sessionwatch address 172.16.1.1 172.16.1.2 remote 1 ip route 0 192.168.1.253/32 1 1 remote 10 name Si-RG_22 remote 10 ap 0 name ethip remote 10 ap 0 datalink type ip remote 10 ap 0 tunnel local 192.168.1.254 remote 10 ap 0 tunnel remote 192.168.1.253 remote 10 bridgegroup use on bridgegroup 0 ip routing off bridgegroup 0 ip policy loose bridgegroup 0 ipv6 routing off bridgegroup 0 vlan tag transmit on tracking 0 trigger 0 node 0 tracking 0 action 0 down "offline ether group 1 port 1" tracking 0 action 1 up "online ether group 1 port 1" node-trigger 0 address 192.168.1.1 192.168.1.1 syslog facility 23 time zone 0900 consoleinfo autologout 15m telnetinfo autologout 5m loopback ip address 0 172.16.1.1 terminal charset SJIS **************************************** Si-R 2 config **************************************** ethergroup 2 vlan mode disable ethergroup 2 bridgegroup use on ether 1 1 vlan untag 1 lan 1 ip address 192.168.1.2/24 3 lan 1 ip proxyarp off lan 1 vrrp use on lan 1 vrrp group 0 id 1 100 192.168.1.254 lan 1 vrrp group 0 action 0 master online remote 10 lan 1 vrrp group 0 action 1 backup offline remote 10 lan 1 vrrp group 0 vaddr icmp accept lan 1 vrrp group 0 vaddr etherip accept lan 1 vlan 0 remote 0 name internet remote 0 mtu 1454 remote 0 ap 0 name pppoe remote 0 ap 0 datalink bind vlan 1 remote 0 ap 0 ppp auth send id-b@isp pwd-b@isp remote 0 ap 0 keep connect remote 0 ppp ipcp vjcomp disable remote 0 ip address local 203.0.113.2 remote 0 ip route 0 default 1 1 remote 0 ip nat mode multi 203.0.113.2 1 5m remote 0 ip nat static 0 203.0.113.2 500 203.0.113.2 500 17 remote 0 ip nat static 1 203.0.113.2 any 203.0.113.2 any 50 remote 0 ip msschange 1414 remote 1 name Si-RG_2 remote 1 ap 0 name ipsec remote 1 ap 0 datalink type ipsec remote 1 ap 0 ipsec type ike remote 1 ap 0 ipsec ike protocol esp remote 1 ap 0 ipsec ike encrypt aes-cbc-256 remote 1 ap 0 ipsec ike auth hmac-sha256 remote 1 ap 0 ipsec ike pfs modp1536 remote 1 ap 0 ike name remote sir2 remote 1 ap 0 ike shared key text sir2-key remote 1 ap 0 ike proposal 0 encrypt aes-cbc-256 remote 1 ap 0 ike proposal 0 hash hmac-sha256 remote 1 ap 0 ike proposal 0 pfs modp1536 remote 1 ap 0 tunnel local 203.0.113.2 remote 1 ap 0 sessionwatch address 172.16.1.1 172.16.1.2 remote 1 ip route 0 192.168.1.253/32 1 1 remote 10 name Si-RG_22 remote 10 ap 0 name ethip remote 10 ap 0 datalink type ip remote 10 ap 0 tunnel local 192.168.1.254 remote 10 ap 0 tunnel remote 192.168.1.253 remote 10 bridgegroup use on bridgegroup 0 ip routing off bridgegroup 0 ip policy loose bridgegroup 0 ipv6 routing off bridgegroup 0 vlan tag transmit on syslog facility 23 time zone 0900 consoleinfo autologout 15m telnetinfo autologout 5m loopback ip address 0 172.16.1.1 terminal charset SJIS **************************************** Si-R 3 config **************************************** ethergroup 2 vlan mode disable ethergroup 2 bridgegroup use on ether 1 1 vlan untag 1 lan 1 ip address 192.168.1.3/24 3 lan 1 ip proxyarp off lan 1 vrrp use on lan 1 vrrp group 0 id 2 254 192.168.1.253 lan 1 vrrp group 0 trigger 0 ifdown rmt1 200 lan 1 vrrp group 0 action 0 master online remote 10 lan 1 vrrp group 0 action 1 backup offline remote 10 lan 1 vrrp group 0 vaddr icmp accept lan 1 vrrp group 0 vaddr etherip accept lan 1 vlan 0 remote 0 name internet remote 0 mtu 1454 remote 0 ap 0 name pppoe remote 0 ap 0 datalink bind vlan 1 remote 0 ap 0 ppp auth send id-c@isp pwd-c@isp remote 0 ap 0 keep connect remote 0 ppp ipcp vjcomp disable remote 0 ip route 0 203.0.113.2/32 1 1 remote 0 ip nat mode multi any 1 5m remote 0 ip nat static 0 172.16.1.2 500 any 500 17 remote 0 ip nat static 1 172.16.1.2 any any any 50 remote 0 ip msschange 1414 remote 1 name Si-RG_1 remote 1 ap 0 name ipsec remote 1 ap 0 datalink type ipsec remote 1 ap 0 ipsec type ike remote 1 ap 0 ipsec ike protocol esp remote 1 ap 0 ipsec ike encrypt aes-cbc-256 remote 1 ap 0 ipsec ike auth hmac-sha256 remote 1 ap 0 ipsec ike pfs modp1536 remote 1 ap 0 ike name local sir2 remote 1 ap 0 ike shared key text sir2-key remote 1 ap 0 ike proposal 0 encrypt aes-cbc-256 remote 1 ap 0 ike proposal 0 hash hmac-sha256 remote 1 ap 0 ike proposal 0 pfs modp1536 remote 1 ap 0 tunnel remote 203.0.113.2 remote 1 ap 0 sessionwatch address 172.16.1.2 172.16.1.1 remote 1 ip route 0 192.168.1.254/32 1 1 remote 10 name Si-RG_11 remote 10 ap 0 name ethip remote 10 ap 0 datalink type ip remote 10 ap 0 tunnel local 192.168.1.253 remote 10 ap 0 tunnel remote 192.168.1.254 remote 10 bridgegroup use on bridgegroup 0 ip routing off bridgegroup 0 ip policy loose bridgegroup 0 ipv6 routing off bridgegroup 0 vlan tag transmit on tracking 0 trigger 0 node 0 tracking 0 action 0 down "offline ether group 1 port 1" tracking 0 action 1 up "online ether group 1 port 1" node-trigger 0 address 192.168.1.3 192.168.1.3 syslog facility 23 time zone 0900 consoleinfo autologout 15m telnetinfo autologout 5m loopback ip address 0 172.16.1.2 terminal charset SJIS **************************************** Si-R 4 config **************************************** ethergroup 2 vlan mode disable ethergroup 2 bridgegroup use on ether 1 1 vlan untag 1 lan 1 ip address 192.168.1.4/24 3 lan 1 ip proxyarp off lan 1 vrrp use on lan 1 vrrp group 0 id 2 100 192.168.1.253 lan 1 vrrp group 0 action 0 master online remote 10 lan 1 vrrp group 0 action 1 backup offline remote 10 lan 1 vrrp group 0 vaddr icmp accept lan 1 vrrp group 0 vaddr etherip accept lan 1 vlan 0 remote 0 name internet remote 0 mtu 1454 remote 0 ap 0 name pppoe remote 0 ap 0 datalink bind vlan 1 remote 0 ap 0 ppp auth send id-d@isp pwd-d@isp remote 0 ap 0 keep connect remote 0 ppp ipcp vjcomp disable remote 0 ip route 0 203.0.113.2/32 1 1 remote 0 ip nat mode multi any 1 5m remote 0 ip nat static 0 172.16.1.2 500 any 500 17 remote 0 ip nat static 1 172.16.1.2 any any any 50 remote 0 ip msschange 1414 remote 1 name Si-RG_1 remote 1 ap 0 name ipsec remote 1 ap 0 datalink type ipsec remote 1 ap 0 ipsec type ike remote 1 ap 0 ipsec ike protocol esp remote 1 ap 0 ipsec ike encrypt aes-cbc-256 remote 1 ap 0 ipsec ike auth hmac-sha256 remote 1 ap 0 ipsec ike pfs modp1536 remote 1 ap 0 ike name local sir2 remote 1 ap 0 ike shared key text sir2-key remote 1 ap 0 ike proposal 0 encrypt aes-cbc-256 remote 1 ap 0 ike proposal 0 hash hmac-sha256 remote 1 ap 0 ike proposal 0 pfs modp1536 remote 1 ap 0 tunnel remote 203.0.113.2 remote 1 ap 0 sessionwatch address 172.16.1.2 172.16.1.1 remote 1 ip route 0 192.168.1.254/32 1 1 remote 10 name Si-RG_11 remote 10 ap 0 name ethip remote 10 ap 0 datalink type ip remote 10 ap 0 tunnel local 192.168.1.253 remote 10 ap 0 tunnel remote 192.168.1.254 remote 10 bridgegroup use on bridgegroup 0 ip routing off bridgegroup 0 ip policy loose bridgegroup 0 ipv6 routing off bridgegroup 0 vlan tag transmit on syslog facility 23 time zone 0900 consoleinfo autologout 15m telnetinfo autologout 5m loopback ip address 0 172.16.1.2 terminal charset SJIS