Copyright 2024 Fsas Technologies Inc
reference
https://www.fujitsu.com/jp/documents/products/network/router/sir/example/internet/vpn_ipoe-guide.pdf

****************************************
 Si-R 1 config
****************************************
ether 1 1 vlan untag 1
ether 2 1-4 vlan untag 2
lan 0 ipv6 use on
lan 0 ipv6 address 0 auto
lan 0 ipv6 address 1 mapce-auto
lan 0 ipv6 ra mode recv
lan 0 ipv6 ra recv prefix-mode routers
lan 0 ipv6 filter 0 pass acl 10 in
lan 0 ipv6 filter 1 pass acl 11 in
lan 0 ipv6 filter 2 pass acl 12 in
lan 0 ipv6 filter default spi 5m
lan 0 ipv6 dhcp service client auto
lan 0 ipv6 dhcp client option na off
lan 0 ipv6 ndproxy mode enable
lan 0 ipv6 ndproxy bind lan1
lan 0 vlan 1
lan 1 ip address 192.168.1.1/24 3
lan 1 ipv6 use on
lan 1 vlan 2
remote 0 name ipip
remote 0 ap 0 datalink type ip
remote 0 ap 0 tunnel local ::
remote 0 ap 0 tunnel remote ::
remote 0 ap 0 tunnel mtu 1500
remote 0 ap 0 softwire type map-e
remote 0 ap 0 softwire option option-c
remote 0 ip address local 203.0.113.1
remote 0 ip route 0 default 1 1
remote 0 ip nat mode multi 203.0.113.1 1 5m
remote 0 ip nat static 0 203.0.113.1 any 203.0.113.1 any 50
remote 0 ip nat static 1 203.0.113.1 500 203.0.113.1 500 17
remote 0 ip nat static 2 203.0.113.1 4500 203.0.113.1 4500 17
remote 0 ip msschange 1420
remote 1 name Si-R_2
remote 1 ap 0 name ipsec
remote 1 ap 0 datalink type ipsec
remote 1 ap 0 ipsec type ike
remote 1 ap 0 ipsec ike protocol esp
remote 1 ap 0 ipsec ike encrypt aes-cbc-256
remote 1 ap 0 ipsec ike auth hmac-sha256
remote 1 ap 0 ipsec ike pfs modp2048
remote 1 ap 0 ipsec ike lifetime 1h
remote 1 ap 0 ike name remote sir2
remote 1 ap 0 ike shared key text sir2-key
remote 1 ap 0 ike proposal 0 encrypt aes-cbc-256
remote 1 ap 0 ike proposal 0 hash hmac-sha256
remote 1 ap 0 ike proposal 0 pfs modp2048
remote 1 ap 0 ike proposal 0 lifetime 8h
remote 1 ap 0 ike nat-traversal use on
remote 1 ap 0 tunnel local 203.0.113.1
remote 1 ap 0 sessionwatch address 192.168.1.1 192.168.2.1
remote 1 ip route 0 192.168.2.0/24 1 1
remote 1 ip msschange 1300
acl 10 description v6_dhcp
acl 10 ipv6 any any 17 any
acl 10 udp 547 546
acl 11 description v6_icmp
acl 11 ipv6 any any 58 any
acl 12 description v6_IP-in-IP
acl 12 ipv6 any any 4 any
syslog facility 23
time auto server 0::0 dhcp
time zone 0900
proxydns domain 0 map-e option-c-rule lan0
proxydns domain 1 map-e option-c-ddns lan0
proxydns domain 2 any * any dhcp lan0
consoleinfo autologout 8h
telnetinfo autologout 5m
internal-path 0 ip address 192.168.1.2/24 3
internal-path 0 ipv6 use on
internal-path 0 ipv6 address auto
internal-path 0 vlan 2
internal-path interlocking on
map-e mode enable
map-e internal-path 0
internal-host ip dns 192.168.1.1
terminal charset SJIS


****************************************
 Si-R 2 config
****************************************
ether 1 1 vlan untag 1
ether 2 1-4 vlan untag 2
lan 0 ipv6 use on
lan 0 ipv6 address 0 auto
lan 0 ipv6 address 1 mapce-auto
lan 0 ipv6 ra mode recv
lan 0 ipv6 ra recv prefix-mode routers
lan 0 ipv6 filter 0 pass acl 10 in
lan 0 ipv6 filter 1 pass acl 11 in
lan 0 ipv6 filter 2 pass acl 12 in
lan 0 ipv6 filter default spi 5m
lan 0 ipv6 dhcp service client auto
lan 0 ipv6 dhcp client option na off
lan 0 ipv6 ndproxy mode enable
lan 0 ipv6 ndproxy bind lan1
lan 0 vlan 1
lan 1 ip address 192.168.2.1/24 3
lan 1 ipv6 use on
lan 1 vlan 2
remote 0 name ipip
remote 0 ap 0 datalink type ip
remote 0 ap 0 tunnel local ::
remote 0 ap 0 tunnel remote ::
remote 0 ap 0 tunnel mtu 1500
remote 0 ap 0 softwire type map-e
remote 0 ap 0 softwire option option-c
remote 0 ip route 0 default 1 1
remote 0 ip nat mode multi any 1 5m
remote 0 ip nat wellknown 0 any off
remote 0 ip nat portsaving tcp enable
remote 0 ip nat portsaving udp enable
remote 0 ip nat portsaving icmp enable
remote 0 ip msschange 1420
remote 1 name Si-R_1
remote 1 ap 0 name ipsec
remote 1 ap 0 datalink type ipsec
remote 1 ap 0 ipsec type ike
remote 1 ap 0 ipsec ike protocol esp
remote 1 ap 0 ipsec ike encrypt aes-cbc-256
remote 1 ap 0 ipsec ike auth hmac-sha256
remote 1 ap 0 ipsec ike pfs modp2048
remote 1 ap 0 ipsec ike lifetime 1h
remote 1 ap 0 ike name local sir2
remote 1 ap 0 ike shared key text sir2-key
remote 1 ap 0 ike proposal 0 encrypt aes-cbc-256
remote 1 ap 0 ike proposal 0 hash hmac-sha256
remote 1 ap 0 ike proposal 0 pfs modp2048
remote 1 ap 0 ike proposal 0 lifetime 8h
remote 1 ap 0 ike nat-traversal use on
remote 1 ap 0 ike initial connect
remote 1 ap 0 tunnel remote 203.0.113.1
remote 1 ap 0 sessionwatch address 192.168.2.1 192.168.1.1
remote 1 ip route 0 192.168.1.0/24 1 1
remote 1 ip msschange 1300
acl 10 description v6_dhcp
acl 10 ipv6 any any 17 any
acl 10 udp 547 546
acl 11 description v6_icmp
acl 11 ipv6 any any 58 any
acl 12 description v6_IP-in-IP
acl 12 ipv6 any any 4 any
syslog facility 23
time auto server 0::0 dhcp
time zone 0900
proxydns domain 0 map-e option-c-rule lan0
proxydns domain 1 map-e option-c-ddns lan0
proxydns domain 2 any * any dhcp lan0
consoleinfo autologout 8h
telnetinfo autologout 5m
internal-path 0 ip address 192.168.2.2/24 3
internal-path 0 ipv6 use on
internal-path 0 ipv6 address auto
internal-path 0 vlan 2
internal-path interlocking on
map-e mode enable
map-e internal-path 0
internal-host ip dns 192.168.2.1
terminal charset SJIS