-----< LAN間接続 >-----
( () ))
(( ))
(( () Internet () ))
( ( )) )
//
______//______
[______________] IP45/163 (Cisco1603)
| 172.30.1.2 /255.255.255.0
|
-------------[ ]----------------[ ]----------------------172.30.1.0
|
_______|_______ 172.30.1.1 /255.255.255.0
Cisco1603 [_______________]
//
//
// INS 64
//
______//______
[______________] IP45/163 (Cisco1603)
| 172.30.2.1 /255.255.255.0
|
-------------[ ]------------------------------------------172.30.2.0
LAN間接続の場合の設定例です。
専用のシリアル・コネクターを使いパソコンのターミナルモードで接続し
ルータの設定を行います。
ここでは、ルータの電源を入れてから設定までを記載しています。
-
System Bootstrap, Version 11.1(10)AA, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
Copyright (c) 1997 by cisco Systems, Inc.
C1600 processor with 2048 Kbytes of main memory
program load complete, entry point: 0x4018060, size: 0x1e1568
Notice: NVRAM invalid, possibly due to write erase.
program load complete, entry point: 0x8000060, size: 0x2f1a58
Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706
Cisco Internetwork Operating System Software
IOS (tm) 1600 Software (C1600-Y-L), Version 11.1(18)AA, EARLY DEPLOYMENT RELEASE
SOFTWARE (fc1)
Copyright (c) 1986-1998 by cisco Systems, Inc.
Compiled Tue 24-Mar-98 13:39 by linda
Image text-base: 0x0801A424, data-base: 0x02005000
cisco 1603 (68360) processor (revision C) with 1536K/512K bytes of memory.
Processor board ID 09182142, with hardware revision 00000000
Bridging software.
X.25 software, Version 2.0, NET2, BFE and GOSIP compliant.
Basic Rate ISDN software, Version 1.0.
1 Ethernet/IEEE 802.3 interface.
1 ISDN Basic Rate interface.
System/IO memory with parity disabled
2048K bytes of DRAM onboard
System running from FLASH
8K bytes of non-volatile configuration memory.
4096K bytes of processor board PCMCIA flash (Read ONLY)
Notice: NVRAM invalid, possibly due to write erase.
--- System Configuration Dialog ---
At any point you may enter a question mark '?' for help.
Use ctrl-c to abort configuration dialog at any prompt.
Default settings are in square brackets '[]'.
Would you like to enter the initial configuration dialog? [yes]:
System Bootstrap, Version 11.1(10)AA, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
Copyright (c) 1997 by cisco Systems, Inc.
C1600 processor with 2048 Kbytes of main memory
program load complete, entry point: 0x4018060, size: 0x1e1568
Notice: NVRAM invalid, possibly due to write erase.
program load complete, entry point: 0x8000060, size: 0x2f1a58
Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706
Cisco Internetwork Operating System Software
IOS (tm) 1600 Software (C1600-Y-L), Version 11.1(18)AA, EARLY DEPLOYMENT RELEASE
SOFTWARE (fc1)
Copyright (c) 1986-1998 by cisco Systems, Inc.
Compiled Tue 24-Mar-98 13:39 by linda
Image text-base: 0x0801A424, data-base: 0x02005000
cisco 1603 (68360) processor (revision C) with 1536K/512K bytes of memory.
Processor board ID 09182142, with hardware revision 00000000
Bridging software.
X.25 software, Version 2.0, NET2, BFE and GOSIP compliant.
Basic Rate ISDN software, Version 1.0.
1 Ethernet/IEEE 802.3 interface.
1 ISDN Basic Rate interface.
System/IO memory with parity disabled
2048K bytes of DRAM onboard
System running from FLASH
8K bytes of non-volatile configuration memory.
4096K bytes of processor board PCMCIA flash (Read ONLY)
Notice: NVRAM invalid, possibly due to write erase.
--- System Configuration Dialog ---
At any point you may enter a question mark '?' for help.
Use ctrl-c to abort configuration dialog at any prompt.
Default settings are in square brackets '[]'.
Would you like to enter the initial configuration dialog? [yes]: no
Press RETURN to get started!
Cisco Internetwork Operating System Software
IOS (tm) 1600 Software (C1600-Y-L), Version 11.1(18)AA, EARLY DEPLOYMENT RELEASE
SOFTWARE (fc1)
Copyright (c) 1986-1998 by cisco Systems, Inc.
Compiled Tue 24-Mar-98 13:39 by linda
Router>enable
Router#config term
Enter configuration commands, one per line. End with CNTL/Z.
◆ホスト名の登録
Router(config)#hostname router
◆コンソール端末との通信条件の登録
router(config)#line vty 0 4
◆「ユーザEXECモード」のパスワード登録
router(config-line)#password ******
◆「特権EXECモード」のパスワード登録
router(config-line)#enable secret ********
router(config)#ip classless
router(config)#ip subnet-zero
router(config)#no ip domain-lookup
◆回線種別の登録:NTTの高速デジタル専用回線
router(config)#isdn switch-type ntt
◆回線速度の登録:64Kbps(128Kbpsの場合 isdn leased-line bri0 128と記入)
router(config)#isdn leased-line bri0
router(config)#
router(config)#inter ethernet0
◆Ethernet側のIPアドレスの登録
router(config-if)#ip address 172.30.1.1 255.255.255.0
◆WANの相手側との通信条件(IPアドレス指定無しで通信する)
router(config-if)#inter bri0:1
router(config-if)#ip unnumbered ethernet0
router(config-if)#encapsulation ppp
◆ルーティングテーブルの登録
router(config-if)#ip route 0.0.0.0 0.0.0.0 172.30.1.2
router(config)#inter ethernet0
router(config-if)#ip route 172.30.2.0 255.255.255.0 172.30.2.1
router(config)#end
router#
router#config term
Enter configuration commands, one per line. End with CNTL/Z.
◆LAN側の回線オープン
router(config)#inter ethernet0
router(config-if)#no shutdown
router(config-if)#
◆WAN側の回線オープン
router(config-if)#inter bri0:1
router(config-if)#no shutdown
router(config-if)#
router(config-if)#^Z
router#
◆フィルターの設定:指定端末の外部アクセス拒否
router#config term
Enter configuration commands, one per line. End with CNTL/Z.
router(config)#acc 101 deny ip host 172.30.1.201 any
router(config)#acc 101 deny ip host 172.30.1.202 any
router(config)#acc 101 deny ip host 172.30.1.203 any
router(config)#acc 101 deny ip host 172.30.1.204 any
router(config)#acc 101 permit ip any any
router(config)#inter bri0:1
router(config-if)#ip access-greup 101 out
router(config-if)#ip access-greup 101 in
router(config)#^Z
router#
Building configuration...
[OK]
router#
◆設定内容の確認
router#show run
Building configuration...
Current configuration:
!
version 11.1
service udp-small-servers
service tcp-small-servers
!
hostname router
!
enable secret 5 $1$XY31$Yizkg3/P9tkGgLzBACObs/
!
ip subnet-zero
no ip domain-lookup
isdn switch-type ntt
isdn leased-line BRI0
!
interface Ethernet0
ip address 172.30.1.1 255.255.255.0
!
interface BRI0
no ip address
shutdown
no cdp enable
!
interface BRI0:1
ip unnumbered Ethernet0
encapsulation ppp
ip access-group 101 out
ip access-group 101 in
!
interface BRI0:2
no ip address
shutdown
!
ip classless
ip route 0.0.0.0 0.0.0.0 172.30.1.2
ip route 172.30.2.0 255.255.255.0 172.30.2.1
logging buffered
access-list 101 deny ip host 172.30.1.201 any
access-list 101 deny ip host 172.30.1.202 any
access-list 101 deny ip host 172.30.1.203 any
access-list 101 deny ip host 172.30.1.204 any
access-list 101 permit ip any any
!
line con 0
line vty 0 4
password *****
login
!
end
◆設定内容の記憶
router#write term
router#