IX2015の基本設定

さて、いよいよ設定に入りますー
ホスト名を設定。ここが一番時間が掛かったというのは内緒だｗｗｗ

Router# conf
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# hostname amu

ファームウェアをあげるためのテンポラリ設定を解除

amu(config)# interface FastEthernet1/0.0
amu(config-FastEthernet1/0.0)# clear interface
% Interface is administratively down.
amu(config-FastEthernet1/0.0)# show config
% Non-volatile configuration memory is not present
amu(config-FastEthernet1/0.0)# exit

そして今日の所の設定。初IX2015なので、何かおかしくても見なかった事にしてねｗ

amu(config)# username admin password plain XXXXX administrator
!
ntp ip enable
ntp server x.x.x.x
ntp interval 3600
!
ip route default 210.xxx.xxx.xxx
ip route 192.168.x.0/24 Tunnel0.0
ip route 192.168.xxx.0/24 Tunnel0.0
ip access-list 某しゃ氏 permit ip src 210.xxx.xxx.0/25 dest xxx.xxx.xxx.xxx/32
ip access-list 某しゃ氏 permit icmp src xxx.xxx.xxx.xxx/29 dest any
ip ufs-cache enable
!
arp auto-refresh
!
!
ike commit-bit ike-policy
!
ike proposal ike-prop encryption 3des hash md5 lifetime 3600
!
ike policy 某しゃ氏-policy peer xxx.xxx.xxx.xxx key 秘密鍵 mode aggressive ike-prop
ike local-id 某しゃ氏-policy keyid キーID
!
ipsec autokey-map 某しゃ氏-policy shalwend peer xxx.xxx.xxx.xxx ike-prop
!
proxy-dns ip enable
proxy-dns server xxx.xxx.xxx.xxx
!
device FastEthernet0/0
!
device FastEthernet0/1
!
device FastEthernet1/0
!
device BRI1/0
isdn switch-type hsd128k
!
interface FastEthernet0/0.0
ip address dhcp receive-default
ip tcp adjust-mss auto
no shutdown
!
interface FastEthernet0/1.0
ip address 10.xxx.xxx.xxx/24
no shutdown
!
interface FastEthernet1/0.0
no ip address
shutdown
!
interface BRI1/0.0
encapsulation ppp
no auto-connect
no ip address
shutdown
!
interface Loopback0.0
no ip address
!
interface Null0.0
no ip address
!
interface Tunnel0.0
tunnel mode ipsec
ip unnumbered FastEthernet0/1.0
ipsec policy tunnel 某しゃ氏-policy in
no shutdown

まだikeの通信が確立できていないけれども、今日はここまで。