![[PukiWiki]](image/pukiwiki.png "[PukiWiki]")
rt# ip int address ip_addr/mask [broadcast ip_addr]
rt# lan type int speed [port] [speed [port]...]
| speed | 規格 |
| 100-fdx | 100base-TX Full-Duplex |
| 100-hdx | 100base-TX Half-Duplex |
| 10-fdx | 10base-T Full-Duplex |
| 10-hdx | 10base-T Half-Duplex |
rt# show status int
rt# pp select num P2P設定モードに入る rtppnum# pp keepalive use lcp-echo rtppnum# pp keepalive interval sec count=num rtppnum# pp always-on on|off 常時接続の可否 rtppnum# pppoe use int 使用するI/F rtppnum# pp auth accept pap|chap rtppnum# pp auth myname user passwd rtppnum# ppp lcp mru on 1454 MRUのサイズ rtppnum# ppp ccp type none パケット圧縮 rtppnum# ip pp address ip_addr/netmask rtppnum# ip pp mtu size MTUのサイズ rtppnum# pp enable num P2P設定を有効にする rtppnum# pp select none P2P設定モードを抜ける rt#
rt# isdn local address int tel_num[/sub_addr]
rt# pp select num P2P設定モードに入る rtppnum# pp bind int bri I/Fを関連付ける rtppnum# isdn remote address call|arrive tel_num[/sub_addr] DU先 rtppnum# pp enable num P2P設定を有効にする rtppnum# pp select none P2P設定モードを抜ける
rt# description int description
rt# ip route ip-addr/netmask gateway next-hop
rt# ip route default gateway next-hop
rt# show ip route
rt# show status ospf database
rt# show status ospf neighbor
rt# show status ospf interface
rt# show arp
ip interface secure filter in|out num... ip filter num type src-ip-addr dst-ip-addr protocol src-port dst-port
| タイプ | 説明 |
| pass | 許可 |
| pass-log | 許可してログに記録 |
| reject | 拒否 |
| reject-log | 拒否してログに記録 |
| restrict | |
| restrict-log | |
| restrict-nolog |
lan1 lan2
┌───[Router1]───┐
│ 2 2 │
│ ID1 ID2 │
[Host1]───┤ [1] [1] ├───[Host2]
4 │ │ 4
│ lan1 lan2 │
└───[Router2]───┘
192.168.0.0/24 3 3 192.168.1.0/24
rt# ip int vrrp id ip_addr [priority=num] [preempt=on|off] [auth=key]
ex）
rt1# ip lan1 vrrp 1 192.168.0.1 priority=200 rt1# ip lan1 vrrp 2 192.168.1.1 priority=200
rt2# ip lan1 vrrp 1 192.168.0.1 priority=100 rt2# ip lan1 vrrp 2 192.168.1.1 priority=100
rt# ip int vrrp shutdown trigger id trigger
| トリガ | 説明 |
| lan[0-9]+ | Ethernetがリンクダウンした場合 |
| pp pp_num [dlci=DLCI] | P2P回線が切断された場合 |
| route net_addr [nexthop] | 特定のネットワークがルーティングテーブルから消えた場合 [特定のネットワークへの次ホップが一致しない場合] |
ex）
rt1# ip lan1 vrrp shutdown trigger 1 lan2 lan2がリンクダウンしたら、ID1のlan1をシャットダウン rt1# ip lan2 vrrp shutdown trigger 2 lan1 lan1がリンクダウンしたら、ID2のlan2をシャットダウン
rt# no ip int vrrp id rt# no ip int vrrp shutdown trigger id trigger
ex）
rt1# no ip lan1 vrrp 1 rt1# no ip lan2 vrrp 2 rt1# no ip lan1 vrrp shutdown trigger 1 rt1# no ip lan2 vrrp shutdown trigger 2
rt2# no ip lan1 vrrp 1 rt2# no ip lan2 vrrp 2
rt# show status vrrp [int [id]]
rt1# show status vrrp LAN1 ID:1 Virtual-IP: 192.168.0.1 Current master: 192.168.0.2 Priority: 200 VRRP ID 1のマスタ情報 Own state: Master / Priority: 200 Preempt Auth: NONE Timer: 1 自I/Fの状態 LAN2 ID:2 Virtual-IP: 192.168.1.1 Current master: 192.168.1.2 Priority: 200 Own state: Master / Priority: 200 Preempt Auth: NONE Timer: 1
rt# nat descriptor type nat-desc-num masquerade
rt# nat descriptor address outer nat-desc-num out-addr
rt# nat descriptor address inner nat-desc-num in-addr
rt# ip lan3 nat descriptor nat-desc-num
rt# nat descriptor masquerade static nat-desc-num num in-addr l4-proto [out-port [in-port]]
rt# nat descriptor type nat-desc-num nat
rt# nat descriptor address outer nat-desc-num out-addr
rt# nat descriptor address inner nat-desc-num in-addr
rt# nat descriptor static nat-desc-num nat-id out-addr=in-addr [count]
rt# ip lan3 nat descriptor nat-desc-num
rt# show nat descriptor address all
rt# tunnel select tun_num トンネル設定モードに入る rttunnel1# ipsec tunnel policy_id SAポリシーを設定 rttunnel1# tunnel enable tun_num トンネル設定を有効にする rttunnel1# ipsec ike pre-shared-key gw_id text 共有鍵の設定 rttunnel1# ipsec ike remote address gw_id ip_addr 接続先の設定 rttunnel1# ipsec ike local address gw_id ip_addr 自分の設定 rttunnel1# ipsec sa policy policy_id gw_id esp 3des-cbc md5-hmac rttunnel1# ipsec auto refresh on rttunnel1# tunnel select none
rt# ip route 192.168.1.0/24 gateway tunnel tun_num rt# ip route default gateway pp tun_num
rt# show ipsec sa
rt# login password rt# administrator password
rt# console prompt
rt# login timer sec|clear
rt# console character code
rt# snmp community read-only|read-write community
rt# timezone jst
rt# save
rt# show environment
