Copyright 2024 Fsas Technologies Inc
reference
https://www.fujitsu.com/jp/documents/products/network/router/sir/example/internet/vpn_ipoe_ipv6-guide.pdf

****************************************
 Si-R 1 config
****************************************
ether 1 1 vlan untag 1
ether 2 1-4 vlan untag 2
lan 0 ipv6 use on
lan 0 ipv6 ifid 0:0:0:1
lan 0 ipv6 address 0 auto
lan 0 ipv6 ra mode recv
lan 0 ipv6 ra recv prefix-mode routers
lan 0 ipv6 filter 0 pass acl 0 reverse
lan 0 ipv6 filter 1 pass acl 1 reverse
lan 0 ipv6 filter 2 pass acl 2 reverse
lan 0 ipv6 filter 3 pass acl 3 reverse
lan 0 ipv6 filter 4 pass acl 4 reverse
lan 0 ipv6 filter default reject
lan 0 ipv6 dhcp service client
lan 0 ipv6 dhcp client option na off
lan 0 vlan 1
lan 1 ip address 192.168.1.1/24 3
lan 1 vlan 2
remote 0 name vpn-hon
remote 0 ap 0 name honsya
remote 0 ap 0 datalink type ipsec
remote 0 ap 0 ipsec type ike
remote 0 ap 0 ipsec ike protocol esp
remote 0 ap 0 ipsec ike encrypt aes-cbc-256
remote 0 ap 0 ipsec ike auth hmac-sha256
remote 0 ap 0 ipsec ike pfs modp1536
remote 0 ap 0 ike mode main
remote 0 ap 0 ike shared key text sir2-key
remote 0 ap 0 ike proposal 0 encrypt aes-cbc-256
remote 0 ap 0 ike proposal 0 hash hmac-sha256
remote 0 ap 0 ike proposal 0 pfs modp1536
remote 0 ap 0 tunnel local sir1.aoi.flets-east.jp
remote 0 ap 0 tunnel remote sir2.aoi.flets-east.jp
remote 0 ap 0 sessionwatch address 192.168.1.1 192.168.2.1
remote 0 ip route 0 192.168.2.0/24 1 1
remote 0 ip msschange 1350
syslog pri error,warn,info
syslog facility 23
time zone 0900
proxydns source-port any
consoleinfo autologout 8h
telnetinfo autologout 5m
acl 0 ipv6 any any 17 any
acl 0 udp 500 500
acl 1 ipv6 any any 50 any
acl 2 ipv6 fe80::/16 any 17 any
acl 2 udp 546 547
acl 3 ipv6 any any 58 any
acl 4 ipv6 any any 17 any
acl 4 udp any 53
terminal charset SJIS


****************************************
 Si-R 1 config
****************************************
ether 1 1 vlan untag 1
ether 2 1-4 vlan untag 2
lan 0 ipv6 use on
lan 0 ipv6 ifid 0:0:0:1
lan 0 ipv6 address 0 auto
lan 0 ipv6 ra mode recv
lan 0 ipv6 ra recv prefix-mode routers
lan 0 ipv6 filter 0 pass acl 0 reverse
lan 0 ipv6 filter 1 pass acl 1 reverse
lan 0 ipv6 filter 2 pass acl 2 reverse
lan 0 ipv6 filter 3 pass acl 3 reverse
lan 0 ipv6 filter 4 pass acl 4 reverse
lan 0 ipv6 filter default reject
lan 0 ipv6 dhcp service client
lan 0 ipv6 dhcp client option na off
lan 0 vlan 1
lan 1 ip address 192.168.2.1/24 3
lan 1 vlan 2
remote 0 name vpn-hon
remote 0 ap 0 name honsya
remote 0 ap 0 datalink type ipsec
remote 0 ap 0 ipsec type ike
remote 0 ap 0 ipsec ike protocol esp
remote 0 ap 0 ipsec ike encrypt aes-cbc-256
remote 0 ap 0 ipsec ike auth hmac-sha256
remote 0 ap 0 ipsec ike pfs modp1536
remote 0 ap 0 ike mode main
remote 0 ap 0 ike shared key text sir2-key
remote 0 ap 0 ike proposal 0 encrypt aes-cbc-256
remote 0 ap 0 ike proposal 0 hash hmac-sha256
remote 0 ap 0 ike proposal 0 pfs modp1536
remote 0 ap 0 tunnel local sir2.aoi.flets-east.jp
remote 0 ap 0 tunnel remote sir1.aoi.flets-east.jp
remote 0 ap 0 sessionwatch address 192.168.2.1 192.168.1.1
remote 0 ip route 0 192.168.1.0/24 1 1
remote 0 ip msschange 1350
syslog pri error,warn,info
syslog facility 23
time zone 0900
proxydns source-port any
consoleinfo autologout 8h
telnetinfo autologout 5m
acl 0 ipv6 any any 17 any
acl 0 udp 500 500
acl 1 ipv6 any any 50 any
acl 2 ipv6 fe80::/16 any 17 any
acl 2 udp 546 547
acl 3 ipv6 any any 58 any
acl 4 ipv6 any any 17 any
acl 4 udp any 53
terminal charset SJIS