{"id":9334,"date":"2022-08-15T23:57:03","date_gmt":"2022-08-15T14:57:03","guid":{"rendered":"https:\/\/y2tech.net\/blog\/?p=9334"},"modified":"2022-08-21T22:41:25","modified_gmt":"2022-08-21T13:41:25","slug":"reviewing-multi-homed-internet-environment-flets","status":"publish","type":"post","link":"https:\/\/y2tech.net\/blog\/inet\/reviewing-multi-homed-internet-environment-flets-9334\/","title":{"rendered":"\u81ea\u5b85\u306e\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u63a5\u7d9a\u74b0\u5883\u3092\u691c\u8a3c\u3057\u3066\u307f\u308b\uff08FLET’S\u5149 \u7de8\uff09"},"content":{"rendered":"

FLET’S IPoE, Nuro\u5149 \u306e\u30de\u30eb\u30c1\u30db\u30fc\u30e0\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u74b0\u5883\u3092\u30c6\u30b9\u30c8\u4e2d<\/h3>\r\n
\r\n
\r\n
\r\n\"Multi\r\n
\r\nFLET’S\u5149\u3068NURO\u5149\u3067\u30de\u30eb\u30c1\u30db\u30fc\u30e0NW\u74b0\u5883\u3092\u69cb\u7bc9\u3057\u3066\u30c6\u30b9\u30c8\u3092\u884c\u3063\u3066\u3044\u308b\u69d8\u5b50<\/span>\r\n
\r\n<\/div>\r\n
\r\n

\u5148\u65e5\u3001FLET’S\u5149(FTTH)\u3068NURO\u306e\u4e21\u65b9\u3092\u5c0e\u5165\u53ef\u80fd\u306a\u7269\u4ef6\u306b\u5f15\u3063\u8d8a\u3057\u3092\u3057\u3066\u3001\u4e21\u65b9\u306e\u5149\u30d5\u30a1\u30a4\u30d0\u7cfb\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u63a5\u7d9a\u30b5\u30fc\u30d3\u30b9\u304c\u4f7f\u3048\u308b\u72b6\u614b\u306b\u306a\u3063\u305f\u306e\u3067\u3001\u4e21\u65b9\u306e\u63a5\u7d9a\u30b5\u30fc\u30d3\u30b9\u306e\u901a\u4fe1\u54c1\u8cea\u72b6\u6cc1\u3092\u78ba\u8a8d\u3057\u3066\u307f\u308b\u3053\u3068\u306b\u3057\u305f\uff0e<\/p>\r\n
\r\n

\u73fe\u5728\u306f\u4e21\u65b9\u306e\u74b0\u5883\u304c\u4f7f\u3048\u308b\u72b6\u614b\u3067\u306f\u3042\u308b\u304c\u3001\u4e21\u65b9\u3092\u7dad\u6301\u3059\u308b\u306e\u306f\u8cbb\u7528\u9762\u3067\u53b3\u3057\u3044\u306e\u3067\u3001NURO\u5149\u3060\u3051\u3067FLET’S\u7cfb\u306e\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u63a5\u7d9a\u30b5\u30fc\u30d3\u30b9\u3092\u5b8c\u5168\u306b\u7f6e\u304d\u63db\u3048\u308b\u4e8b\u304c\u3067\u304d\u308b\u3088\u3046\u3067\u3042\u308c\u3070\u3001\u8cbb\u7528\u3092\u6291\u3048\u308b\u3053\u3068\u306e\u3067\u304d\u308bNURO\u5149\u306b\u4e00\u672c\u5316\u3057\u305f\u3044\u3068\u601d\u3063\u3066\u3044\u308b\uff0e<\/p>\r\n
\r\n

\u4eca\u56de\u306fNURO\u306b\u4e00\u672c\u5316\u3059\u308b\u524d\u306b\u3001FLET’S\u7cfb\u306eIPoE\u63a5\u7d9a\uff08DS-Lite\u3001\u56fa\u5b9aIPv4\uff09\u3068PPPoE\u7cfb\u306e\u56fa\u5b9aIPv4\u30b5\u30fc\u30d3\u30b9\u306a\u3089\u3073\u306bNURO\u5149\u306e\u30b5\u30fc\u30d3\u30b9\u306b\u3064\u3044\u3066\u3001\u305d\u306e\u56de\u7dda\u54c1\u8cea\u3084\u5229\u7528\u76ee\u7684\u306b\u6cbf\u3063\u305f\u4f7f\u3044\u65b9\u304c\u53ef\u80fd\u304b\u3069\u3046\u304b\u691c\u8a3c\u3057\u3066\u307f\u308b\u3082\u306e\u3067\u3042\u308b\uff0e<\/p>\r\n
\r\n

\u73fe\u5728\u5229\u7528\u3057\u3066\u3044\u308bFLET’S\u7cfb\u30b5\u30fc\u30d3\u30b9\u3068NURO\u5149\u306e\u6708\u984d\u30b3\u30b9\u30c8\u3068\u521d\u671f\u8cbb\u7528\u306f\u6b21\u306e\u3088\u3046\u306b\u306a\u3063\u3066\u3044\u308b\uff0e<\/p>\r\n
\r\n

\r\n[ FLET'S \u74b0\u5883 ]\r\n\u3000\u30fbFLET'S\u5149\uff1a\u30003,150\u5186\uff08\uff0b\u7a0e\uff09\/\u6708\u3000\u30ae\u30ac\u30de\u30f3\u30b7\u30e7\u30f3\u30fb\u30b9\u30de\u30fc\u30c8\r\n\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000500\u5186\uff08\uff0b\u7a0e\uff09\/\u6708\u3000\u3000\u3000\u5149\u96fb\u8a71\u30b5\u30fc\u30d3\u30b9\u5951\u7d04\u6599\r\n\u3000\u3000I.S.P\uff1a\u3000IPoE : \u30a4\u30f3\u30bf\u30fc\u30ea\u30f3\u30af ZOOT NATIVE \u56fa\u5b9aIP\u3000(Transix)\r\n\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000  2,200\u5186\uff08\u7a0e\u8fbc\uff09\/\u6708
\r\n\u3000\u3000\u3000\u3000\u3000\u3000\u3000PPPoE : \u30a4\u30f3\u30bf\u30fc\u30ea\u30f3\u30af ZOOT NEXT \u56fa\u5b9aIP 1\u500b \r\n\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000  1,320\u5186\uff08\u7a0e\u8fbc\uff09\/\u6708\r\n\r\n\u3000\u3000\u521d\u671f\u5de5\u4e8b\u8cbb\u7528\uff08\u6982\u7b97\uff09\uff1a\r\n       \u30d5\u30ec\u30c3\u30c4\u5de5\u4e8b\u57fa\u672c\u6599. 4,500\u5186\uff08+\u7a0e\uff09\r\n\u3000\u3000\u3000\u3000\u30d5\u30ec\u30c3\u30c4\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5de5\u4e8b\u6599\u30001,000\u5186\uff08+\u7a0e\uff09\r\n\u3000\u3000\u3000\u3000\u30d5\u30ec\u30c3\u30c4\u5b85\u5185\u5de5\u4e8b\u6599\u30009,500\u5186\uff08+\u7a0e\uff09\r\n\u3000\u3000\u3000\u3000\u3072\u304b\u308a\u96fb\u8a71\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5de5\u4e8b\u6599\u30001,000\u5186\uff08+\u7a0e\uff09\r\n\r\n[ NURO \u74b0\u5883 ]\r\n\u3000\u30fbNURO\u5149 for\u30de\u30f3\u30b7\u30e7\u30f3 : \u3000\u5951\u7d04\u30d7\u30e9\u30f3\u3068\u5171\u540c\u5229\u7528\u8005\u6570\u306b\u3088\u308a\u6708\u984d\u6599\u91d1\u304c\u5909\u52d5\u3059\u308b\uff0e\r\n\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u30003\u5e74\u30d7\u30e9\u30f3: 2,750\u5186\uff086\u4eba\u672a\u6e80\uff09\u3000\u301c 2,090\u5186\uff0810\u4eba\u4ee5\u4e0a\u5951\u7d04\uff09\r\n\r\n\u3000\u3000\u5de5\u4e8b\u8cbb\u7528\uff1a\u30004\u4e07\u5186\uff08\u5206\u5272\u652f\u6255\u3044\uff09\uff1a\u3000\u5b9f\u969b\u306e\u8fd4\u6e08\u91d1\u984d\u306f\u5b9f\u969b\u306b\u5229\u7528\u3057\u305f\u671f\u9593\u3067\u5927\u5e45\u306b\u7570\u306a\u308b\uff0e\r\n\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u9014\u4e2d\u89e3\u7d04\u3059\u308b\u3068\u304b\u306a\u308a\u306e\u91d1\u984d\u306e\u652f\u6255\u3044\u304c\u5fc5\u8981\uff0e\r\n\r\n\u3000\u3000\u5951\u7d04\u4e8b\u52d9\u624b\u6570\u6599\uff1a3,300\u5186\uff08\u7a0e\u8fbc\uff09
\r\n\r\n<\/code><\/pre>\r\n
\r\n
FLET’S\u7cfb\u306f\u30a2\u30af\u30bb\u30b9\u56de\u7dda\uff08NTT)\u3068\u30d7\u30ed\u30d0\u30a4\u30c0\u30b5\u30fc\u30d3\u30b9\uff08\u5404\u793e\uff09\u306e\uff12\u672c\u5efa\u3066\u306b\u306a\u3063\u3066\u3044\u308b\u306e\u3067\u3001NURO\u306e\u3088\u3046\u306a\u4e00\u4f53\u578b\u30b5\u30fc\u30d3\u30b9\u3088\u308a\u3082\u304b\u306a\u308a\u5272\u9ad8\u306b\u306a\u308b\u304c\u3001\u5229\u7528\u671f\u9593\u306e\u7e1b\u308a\u304c\u7121\u3044\u306e\u3067\u3001\u89e3\u7d04\u306b\u95a2\u3057\u3066\u306f\u3042\u307e\u308a\u5fc3\u914d\u3057\u306a\u304f\u3066\u3082\u826f\u3044\u306e\u304c\u30e1\u30ea\u30c3\u30c8\u3060\u308d\u3046\u304b\uff0e\u30d7\u30ed\u30d0\u30a4\u30c0\u30b5\u30fc\u30d3\u30b9\u3082\u30e6\u30fc\u30b6\u5074\u3067\u81ea\u7531\u306b\u9078\u3079\u308b\u306e\u3067\u3001\u30e6\u30fc\u30b6\u306e\u5229\u7528\u5f62\u614b\u306b\u5fdc\u3058\u305f\u30b5\u30fc\u30d3\u30b9\u3092\u9078\u629e\u53ef\u80fd\u3060\uff0e<\/p>\r\n
\r\n
\u4e00\u65b9\u306eNURO\u5149\u306b\u95a2\u3057\u3066\u306f\u3001\u6708\u984d\u6599\u91d1\u306e\u652f\u6255\u3044\u306f3,000\u5186\u672a\u6e80\u7a0b\u5ea6\u306b\u6291\u3048\u308b\u3053\u3068\u304c\u3067\u304d\u308b\u304c\u3001\u5951\u7d04\u671f\u9593\u306e\u7e1b\u308a\u304c\u3042\u308b\u3053\u3068\u3068\u3001\u9014\u4e2d\u89e3\u7d04\u3059\u308b\u3068\u9055\u7d04\u91d1\uff082022\u5e747\u6708\u4ee5\u964d\u306e\u5951\u7d04\u304b\u3089\u306f\u9055\u7d04\u91d1\u306f\u5f93\u6765\u306e\u534a\u984d\u4ee5\u4e0b\u306b\u306a\u3063\u3063\u3066\u3044\u308b\uff09\u3068\u5de5\u4e8b\u8cbb\u306e\u6b8b\u50b5\uff08\u5b9f\u969b\u306b\u6708\u3005\u306e\u652f\u6255\u3044\u304b\u3089\u5de5\u4e8b\u8cbb\u304c\u5145\u5f53\u3055\u308c\u308b\u306e\u306f\u3001\u5229\u7528\u958b\u59cb\u304b\u3089\uff16\u30f6\u6708\u5f8c\u304b\u3089\u306a\u306e\u3067\u3001\u5b9f\u8cea\u7684\u306b\u5951\u7d04\u671f\u9593\u306e\u6708\u6570\uff0b\uff16\u30f6\u6708\u3092\u7d4c\u904e\u3057\u306a\u3044\u3068\u5de5\u4e8b\u8cbb\u306f\u5b8c\u5168\u8fd4\u6e08\u3068\u306f\u306a\u3089\u306a\u3044\uff09\u3092\u652f\u6255\u308f\u306a\u304f\u3066\u306f\u306a\u3089\u306a\u3044\u306e\u3067\u6ce8\u610f\u304c\u5fc5\u8981\u3060\uff0e<\/p>\r\n
\r\n
\u30de\u30eb\u30c1\u30db\u30fc\u30e0\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u63a5\u7d9a\u74b0\u5883\u306e\u69cb\u7bc9<\/h4>\r\n
\r\n
\u81ea\u5b85\u306e\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u74b0\u5883\u3092\u30de\u30eb\u30c1\u30db\u30fc\u30e0\u3067\u7d44\u3093\u3067\u3044\u308b\u4eba\u306f\u6b86\u3069\u5c45\u306a\u3044\u3068\u601d\u3046\u304c\u3001\u30d5\u30ea\u30fc\u30e9\u30f3\u30b9\u306eIT\u30a8\u30f3\u30b8\u30cb\u30a2\u3084\u4f01\u696d\u3084\u7d44\u7e54\u306e\u60c5\u5831\u30b7\u30b9\u30c6\u30e0\u7cfb\u306e\u30a8\u30f3\u30b8\u30cb\u30a2\u3067\u3042\u308c\u3070\u3001\u5728\u5b85\u30ef\u30fc\u30af\u306a\u3069\u3067\u5fc5\u8981\u306b\u8feb\u3089\u308c\u3066\u30de\u30eb\u30c1\u30db\u30fc\u30e0\u5316\u3057\u3066\u3044\u308b\u4eba\u3082\u5c45\u308b\u304b\u3082\u3057\u308c\u306a\u3044\uff0e<\/p>\r\n
\r\n
\u30de\u30eb\u30c1\u30db\u30fc\u30e0\u74b0\u5883\u3092\u69cb\u7bc9\u3059\u308b\u306b\u306f\u3001\u305d\u308c\u306a\u308a\u306e\u696d\u52d9\u7528\u6a5f\u6750\u3068\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0\u306e\u77e5\u8b58\u304c\u5fc5\u8981\u3068\u306a\u308b\u304c\u3001\u624b\u9803\u306a\u6a5f\u6750\uff08NEC IX\u30eb\u30fc\u30bf\u3068Fortigate FW\u30eb\u30fc\u30bf\uff09\u304c\u4e01\u5ea6\uff12\u30bb\u30c3\u30c8\u63c3\u3063\u3066\u3044\u305f\u306e\u3067\u3001\u6bd4\u8f03\u691c\u8a3c\u3092\u884c\u3046\u306b\u306f\u90fd\u5408\u304c\u826f\u3044\uff0e<\/p>\r\n
\r\n
\u4eca\u56de\u69cb\u7bc9\u3057\u305f\u81ea\u5b85\u306e\u30de\u30eb\u30c1\u30db\u30fc\u30e0\u74b0\u5883\u306f\u6b21\u306e\u3088\u3046\u306a\u69cb\u6210\u306b\u306a\u3063\u3066\u3044\u308b\uff0e<\/p>\r\n
\r\n
\r\n
\r\n\"Dual<\/a>\r\n
\r\nFLET’S \u5149 & NURO\u5149\u306b\u3088\u308b\u691c\u8a3c\u7528\u30de\u30eb\u30c1\u30db\u30fc\u30e0\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u69cb\u6210\u56f3\uff08\u6982\u8981\uff09[ \u30af\u30ea\u30c3\u30af\u3067\u62e1\u5927\u753b\u50cf\u8868\u793a ]<\/span>\r\n<\/div>\r\n
\r\n
\r\n
\u3053\u306e\u69cb\u6210\u3067\u306f\u3001FLET’S\u7cfb\u306e\u914d\u4e0b\u306eNW\u306fVLAN100\u756a\u53f0\u3001NURO\u7cfb\u306e\u914d\u4e0b\u306eNW\u306fVLAN200\u756a\u53f0\u3092\u5272\u308a\u5f53\u3066\u3066\u3044\u308b\uff0e\u4e00\u822c\u5bb6\u5ead\u7528\u306eNURO\u30b5\u30fc\u30d3\u30b9\u3067\u306f\u6a5f\u80fd\u4e0d\u8db3\u3067\u3001FLET’S\u5149\u7cfb\u306e\u30b5\u30fc\u30d3\u30b9\u3092\u5b8c\u5168\u306b\u7f6e\u304d\u63db\u3048\u308b\u4e8b\u306f\u96e3\u3057\u3044\u304c\u3001\u3068\u308a\u3042\u3048\u305aFELT’S\u7cfb\u306e\u30b5\u30fc\u30d3\u30b9\u3092\u505c\u6b62\u3057\u3066\u3082\u3001SSL-VPN\u306e\u3088\u3046\u306a\u56fa\u5b9aIP\u306b\u4f9d\u5b58\u3059\u308b\u30b5\u30fc\u30d3\u30b9\u3082\u4f55\u3068\u304b\u7dad\u6301\u3067\u304d\u308b\uff0e\u52ff\u8ad6\u3001NURO\u306fIPv4\/IPv6\u5171\u306bDHCP\u7cfb\u306e\u30b5\u30fc\u30d3\u30b9\u306a\u306e\u3067IP\u30a2\u30c9\u30ec\u30b9\u304c\u5909\u66f4\u3068\u306a\u308b\u30ea\u30b9\u30af\u306f\u907f\u3051\u3089\u308c\u306a\u3044\u304c\u3001\u5df7\u306e\u60c5\u5831\u3092\u62fe\u3044\u96c6\u3081\u308b\u3068NURO\u30eb\u30fc\u30bf\u3092\u9577\u6642\u9593\u505c\u6b62\u3057\u306a\u3044\u9650\u308a\u306f\u3001\u307b\u307c\uff08\u534a\uff09\u56fa\u5b9aIP\u30b5\u30fc\u30d3\u30b9\u3068\u3057\u3066\u5229\u7528\u53ef\u80fd\u306a\u3088\u3046\u3060\uff0e<\/p>\r\n
\r\n
\r\n\"Nuro\r\n
\r\n\u6b8b\u308a\u30ea\u30fc\u30b9\u6642\u9593\u3092\u6ce8\u610f\u6df1\u304f\u76e3\u8996\u3057\u3066\u3044\u308b\u3068DHCP\u306e\u30ea\u30fc\u30b9\u9593\u9694\u304c\u63b4\u3081\u305d\u3046\u3060\uff0e<\/span>\r\n
\r\n<\/div>\r\n
\uff0a\u8ffd\u8a18\uff1a\u4e0a\u8a18\u306eF660A\u306eDHCP\u30ea\u30fc\u30b9\u60c5\u5831\u304b\u3089\u6b63\u78ba\u306aDHCP\u30ea\u30fc\u30b9\u30bf\u30a4\u30e0\u3092\u77e5\u308b\u305f\u3081\u306b\u306f\u3001\u6570\u6642\u9593\u306e\u9593\u9694\u3092\u958b\u3051\u3066\u53d6\u5f97\u3057\u305f\uff12\u56de\u306e\u30ea\u30fc\u30b9\u60c5\u5831\u304b\u3089\u63a8\u5b9a\u3059\u308b\u3068\u3044\u3046\u3088\u3046\u306a\u7b97\u6570\u304c\u5fc5\u8981\u3060\u304c\u3001\u5225\u306aONU\u30eb\u30fc\u30bf\uff08SGP200\uff09\u3067\u306eWAN\u5074\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9\u60c5\u5831\u304c\u624b\u5143\u306b\u6b8b\u3063\u3066\u3044\u305f\u3002\uff08SGP200 \u306eIPv6\u306e\u30cf\u30f3\u30c9\u30ea\u30f3\u30b0\u306b\u554f\u984c\u304c\u3042\u3063\u305f\u305f\u3081\u3001ONU\u3092\u691c\u8a3c\u306e\u53d6\u308c\u3066\u3044\u308bF660A\u306b\u4ea4\u63db\u3057\u3066\u8cb0\u3063\u3066\u3044\u308b\uff09<\/p>\r\n
\r\n
\u4e0b\u8a18\u306b\u3001SGP200\u3067\u306eWAN\u5074\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9\u306b\u95a2\u3059\u308b\u53d6\u5f97\u3057\u305f\u60c5\u5831\u3092\u793a\u3059\u3002\u3053\u306e\u60c5\u5831\u304b\u3089\u3001\u6b63\u78ba\u306aWAN\u5074\u306eDHCP\u306e\u30ea\u30fc\u30b9\u6642\u9593\u306f 10,800\u79d2\uff083\u6642\u9593\uff09\u306b\u8a2d\u5b9a\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u5224\u660e\u3057\u305f\u3002\uff08\u5f53\u7136\u306a\u304c\u3089\u3001ONU\u3092SGP200\u304b\u3089F660A\u306b\u4ea4\u63db\u3057\u305f\u969b\u306b\u3001IPv4\u30a2\u30c9\u30ec\u30b9\u3001IPv6 prefix\u5171\u306b\u3001\u5225\u306a\u65b0\u3057\u3044\u7269\u304c\u5272\u308a\u5f53\u3066\u3089\u308c\u3066\u3044\u308b\u304c\u3001NURO\u5074\u306e\u5bfe\u5411\u30eb\u30fc\u30bf\u306f\u540c\u3058\u307e\u307e\u306a\u306e\u3067\u3001IPv4\u30a2\u30c9\u30ec\u30b9\u3001IPv6 prefix\u5171\u306b\u5909\u5316\u306f\u5c11\u306a\u3044\u3002<\/p>\r\n
\r\n
\r\n\r\n[IPv4]\r\nMAC Address:            00:60:6B:A2:20:9C\r\nNAT:                    Enable\r\nIP Acquisition Mode:    DHCP\r\nIP Address\/Subnet Mask: 150.aaa.bbb.ccc\/255.255.255.0\r\nGateway:\t            150.aaa.bbb.1\r\nDNS Servers:            118.238.201.33,152.165.245.17\r\nLease Time:             10800 s\r\nRemain Lease:           10108 s\r\nNTP Servers:            118.238.201.33,118.238.201.49\r\n \r\n[IPv6]\r\nMAC Address:            00:60:6B:A2:20:9C\r\nDNS Servers:            240d:10:4:5::33,240d:12:4:1b01:152:165:245:17\r\nPrefix:                 240d:xx:yyyy:zz00::\/56\r\nPrefix Acquisition Mode:  PrefixDelegation\r\nPrefix Preferred Lifetime:  10800 s\r\nPrefix Valid Lifetime:      10800 s\r\nRemaining Lifetime of the Prefix:     6595 s\r\nOnline Duration (dd:hh:mm:ss):    02:12:11:34\r\n \r\n<\/code><\/pre>\r\n
\u30ea\u30fc\u30b9\u6642\u9593\u304c3\u6642\u9593\u3068\u3044\u3046\u306e\u306f\u4e88\u60f3\u3088\u308a\u3082\u304b\u306a\u308a\u77ed\u3044\u304c\u3001NURO\u30b5\u30fc\u30d3\u30b9\u304c\u59cb\u307e\u3063\u305f\u9803\u306f\u591a\u5c11\u306e\u505c\u6b62\uff081\u65e5\u7a0b\u5ea6\uff09\u3067\u306f\u6ec5\u591a\u306bIP\u30a2\u30c9\u30ec\u30b9\u304c\u5909\u66f4\u3055\u308c\u308b\u3053\u3068\u306f\u7121\u304b\u3063\u305f\u3088\u3046\u3060\u304c\u3001\u73fe\u5728\u306f\u30b5\u30fc\u30d3\u30b9\u958b\u59cb\u5f53\u521d\u3088\u308a\u3082\u5229\u7528\u8005\u304c\u4f55\u500d\u306b\u3082\u5897\u3048\u3066\u3044\u308b\u7b48\u306a\u306e\u3067\u3001WAN\u5074\u306e\u56de\u7dda\u72b6\u6cc1\u304c\u3081\u307e\u3050\u308b\u3057\u304f\u5909\u5316\u3057\u3066\u3044\u308b\u3068\u60f3\u5b9a\u3055\u308c\u308b\u306e\u3067\u30013\u6642\u9593\u4ee5\u4e0aONU\u306e\u96fb\u6e90\u3092\u843d\u3068\u3057\u3066\u3057\u307e\u3046\u3068\u6b21\u306b\u5272\u308a\u5f53\u3066\u3089\u308c\u308b\u30b0\u30ed\u30fc\u30d0\u30eb\u30a2\u30c9\u30ec\u30b9\u306f\u5909\u66f4\u3068\u306a\u3063\u3066\u3057\u307e\u3046\u53ef\u80fd\u6027\u304c\u3042\u308a\u305d\u3046\u3060\u3002<\/p>\r\n
\r\n
\r\n
\u3053\u306e\u69cb\u6210\u3092\u8a73\u3057\u304f\u8aac\u660e\u3059\u308b\u3053\u3068\u306f\u3067\u304d\u306a\u3044\u306e\u3067\u3001\u5404VLAN\u306e\u7528\u9014\u3068\u30eb\u30fc\u30bf\u306e\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9\u306e\u69cb\u6210\u304c\u3069\u306e\u3088\u3046\u306b\u306a\u3063\u3066\u3044\u308b\u306e\u304b\u7c21\u5358\u306b\u8aac\u660e\u3057\u3066\u304a\u304f\uff0e<\/p>\r\n
\r\n
 FLET’S\u7cfb\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u69cb\u6210 <\/h4>\r\n
\r\n
\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u30de\u30eb\u30c1\u30d5\u30a3\u30fc\u30c9\u793e\u306eTransix\u30b5\u30fc\u30d3\u30b9\u306b\u3088\u308b\u3001IPv4\/IPv6\u3000IPoE\u30c7\u30e5\u30a2\u30eb\u30b9\u30bf\u30c3\u30af\u30b5\u30fc\u30d3\u30b9\u3092\u5229\u7528\u3057\u3066\u3044\u308b\uff0eIPv6\u30a2\u30c9\u30ec\u30b9\u306e\u5272\u308a\u5f53\u3066\u306f NTT\u306e\u5149\u96fb\u8a71\u5951\u7d04\u3092\u884c\u3063\u3066\u3044\u308b\u306e\u3067\u3001DHCP-PD\u65b9\u5f0f\u306b\u3088\u308b 56bit prefix \u5272\u308a\u5f53\u3066\u3068\u306a\u308b\uff0e<\/p>\r\n
\r\n
NTT\u306e\u30db\u30fc\u30e0\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u6a5f\u5668\u306f\u30ea\u30fc\u30b9\u5951\u7d04\u3057\u3066\u3044\u306a\u3044\u306e\u3067\u300156bit prefix\u3092\u305d\u306e\u307e\u307e\u81ea\u524d\u306e\u30eb\u30fc\u30bf(IX2215)\u3067\u53d7\u3051\u3066\u3001\u914d\u4e0b\u306e\u30b5\u30d6\u30cd\u30c3\u30c8(VLAN)\u306b 64bit prefix \u3067\u6e21\u3057\u3066\u3044\u308b.NTT\u306e\u5149\u96fb\u8a71\u5951\u7d04\u304c\u7121\u3044\u5834\u5408\u306f\u3001RA\u65b9\u5f0f\u306b\u3088\u308b 64bit prefix \u3067\u306eIPv6\u30a2\u30c9\u30ec\u30b9\u5272\u308a\u5f53\u3066\u3068\u306a\u3063\u3066\u3057\u307e\u3046\u306e\u3067\u3001\u4eca\u56de\u306e\u69d8\u306a\u30b5\u30d6\u30cd\u30c3\u30c8\u6bce\u306b\u7570\u306a\u308bIPv6\u30a2\u30c9\u30ec\u30b9\u4f53\u7cfb\u3092\u63a1\u308b\u3053\u3068\u306f\u3067\u304d\u306a\u3044\u306e\u3067\u3001IPv6\u74b0\u5883\u3092\u304d\u3061\u3093\u3068\u69cb\u7bc9\u3057\u305f\u3044\u5834\u5408\u306f\u3001\u5149\u96fb\u8a71\u3092\u5229\u7528\u3059\u308b\u3057\u306a\u3044\u306b\u95a2\u308f\u3089\u305a\u3001\u5fc5\u305a\u5149\u96fb\u8a71\u5951\u7d04\u3092NTT\u3068\u306e\u9593\u3067\u7d50\u3093\u3067\u304a\u304f\u5fc5\u8981\u304c\u3042\u308b\uff0e<\/p>\r\n
\r\n
\u4eca\u56de\u5951\u7d04\u3057\u3066\u3044\u308b\u30a4\u30f3\u30bf\u30fc\u30ea\u30f3\u30af\u306e “ZOOT NATIVE” \u30b5\u30fc\u30d3\u30b9\u3067\u306f\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u30de\u30fc\u30d5\u30a3\u30fc\u30c9\u793e\u306eTransix\u30b5\u30fc\u30d3\u30b9(VNE\u30b5\u30fc\u30d3\u30b9)\u3092\u5229\u7528\u3057\u305fIPv6\/IPv4\u74b0\u5883\u3092\u30e6\u30fc\u30b6\u306b\u63d0\u4f9b\u3057\u3066\u304a\u308a\u3001IPv4\u30a2\u30c9\u30ec\u30b9\u306e\u5272\u308a\u5f53\u3066\u65b9\u6cd5\u3068\u3057\u3066\u3001\u5171\u6709IP\u30a2\u30c9\u30ec\u30b9\u5272\u308a\u5f53\u3066\u65b9\u5f0f\u3068\u56fa\u5b9aIPv4\u30a2\u30c9\u30ec\u30b9\u5272\u308a\u5f53\u3066\u65b9\u5f0f\u306e\uff12\u7a2e\u985e\u304b\u3089\u9078\u3076\u4e8b\u304c\u53ef\u80fd\u3060\uff0e<\/p>\r\n
\r\n
\u56fa\u5b9aIPv4\u30a2\u30c9\u30ec\u30b9\u5272\u308a\u5f53\u3066\u65b9\u5f0f\u306e\u5834\u5408\u306f\u3001\u5229\u7528\u6599\u91d1\u306f\u500d\u306b\u306a\u3063\u3066\u3057\u307e\u3046\u304c\u3001\u30e6\u30fc\u30b6\u306b\u5c02\u7528\u306e\u56fa\u5b9aIPv4\u30a2\u30c9\u30ec\u30b9\u304c1\u500b\u5272\u308a\u5f53\u3066\uff08\u4ed6\u306e\u30e6\u30fc\u30b6\u3068\u306eIP\u30a2\u30c9\u30ec\u30b9\u306e\u5171\u6709\u306f\u306a\u3044\uff09\u3089\u308c\u308b\uff0e\u56fa\u5b9aIPv4\u30a2\u30c9\u30ec\u30b9\u5272\u308a\u5f53\u3066\u65b9\u5f0f\u306e\u3082\u3046\u4e00\u3064\u306e\u5229\u70b9\u306f\u3001IP\u30a2\u30c9\u30ec\u30b9\u3092\uff11\u500b\u5360\u6709\u3067\u304d\u308b\u305f\u3081\u3001\u540c\u6642\u306b\u5229\u7528\u53ef\u80fd\u306a\u30dd\u30fc\u30c8\u6570\u304c\u5171\u6709\u65b9\u5f0f\u306e1,024\u500b\u304b\u3089\u5927\u5e45\u306b\u5897\u3048\u308b\u3053\u3068\u306b\u306a\u308b\uff0e\uff11\u3064\u306eIP\u30a2\u30c9\u30ec\u30b9\u3067\u4f7f\u3048\u308b\u30dd\u30fc\u30c8\u6570\uff0865,535\uff09\u306e\u5236\u9650\u306f\u6709\u308b\u304c\u3001\u3053\u306e\u30dd\u30fc\u30c8\u6570\u3067\u3042\u308c\u3070\u3001\u30b9\u30e2\u30fc\u30eb\u30aa\u30d5\u30a3\u30b9\u3084\u5927\u5bb6\u65cf\u3067\u540c\u6642\u306b\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u3092\u5229\u7528\u3057\u3066\u3082\u3001\u5341\u5206\u8cc4\u3048\u308b\u4e8b\u3060\u308d\u3046\uff0e<\/p>\r\n
\r\n
\u56fa\u5b9aIPv4\u30a2\u30c9\u30ec\u30b9\u30b5\u30fc\u30d3\u30b9\u306e\u3082\u3046\u4e00\u3064\u306e\u5229\u7528\u7528\u9014\u3068\u3057\u3066\u3001\u30db\u30fc\u30e0\u5185\u306b\u5916\u90e8\u304b\u3089\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u306a\u30c7\u30d0\u30a4\u30b9\u3092\u914d\u7f6e\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308b\uff0e\u4eca\u56de\u306fFortigate\u306eSSLVPN\u30b5\u30fc\u30d3\u30b9\u3092\u3053\u306e\u56fa\u5b9aIPv4\u30a2\u30c9\u30ec\u30b9\u30b5\u30fc\u30d3\u30b9\u3067\u5229\u7528\u3057\u3066\u307f\u308b\u3053\u3068\u306b\u3059\u308b\uff0e<\/p>\r\n
\r\n
IPoE\u56fa\u5b9aIPv4\u30a2\u30c9\u30ec\u30b9\u30b5\u30fc\u30d3\u30b9\u3067\u6709\u308a\u5f53\u3066\u3089\u308c\u305fIP\u30a2\u30c9\u30ec\u30b9\u3067\u914d\u4e0b\u306eNW\u4e0a\u306b\u914d\u7f6e\u3057\u305f\u30b5\u30fc\u30d0\u3084NW\u6a5f\u5668\u306b\u63a5\u7d9a\u3055\u305b\u308b\u306b\u306f\u3001\u30eb\u30fc\u30bf\uff08\u4eca\u56de\u306fNEC IX2215\uff09\u5074\u306e\u8a2d\u5b9a\u3067NAT\u307e\u305f\u306f\u9759\u7684(NAPT)\u30dd\u30fc\u30c8\u30a2\u30c9\u30ec\u30b9\u5909\u63db\uff08\u30dd\u30fc\u30c8\u30d5\u30a9\u30ef\u30fc\u30c7\u30a3\u30f3\u30b0\uff09\u306e\u8a2d\u5b9a\u304c\u5fc5\u8981\u306b\u306a\u308b\uff0e<\/p>\r\n
\r\n
\u4eca\u56de\u306f\u3001Fortigate\u306eSSLVPN\u3092\u9759\u7684NAPT\u65b9\u5f0f\u3068NAT\u306e\u4e21\u65b9\u306e\u65b9\u5f0f\u3067\u63a5\u7d9a\u3059\u308b\u4f8b\u306b\u3064\u3044\u3066\u8aac\u660e\u3059\u308b\u3053\u3068\u306b\u3059\u308b\uff0e\u9759\u7684NAPT\u65b9\u5f0f\u306e\u5834\u5408\u306f\u3001\u914d\u4e0b\u306eNW\u30bb\u30b0\u30e1\u30f3\u30c8\u306b\u8a2d\u7f6e\u3055\u308c\u305fPC\u306a\u3069\u306e\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u6a5f\u5668\u304b\u3089\u306f\u901a\u5e38\u306eNAPT\u306b\u3088\u308b\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u30a2\u30af\u30bb\u30b9\u304c\u53ef\u80fd\u3068\u306a\u308a\u3001SSLVPN\u3067\u4f7f\u7528\u3059\u308b\u7279\u5b9a\u306e\u30dd\u30fc\u30c8\uff08TCP:443\u306a\u3069\uff09\u3060\u3051\u3092Fortigate\u306eWAN\u30dd\u30fc\u30c8\u3078\u30dd\u30fc\u30c8\u30d5\u30a9\u30ef\u30fc\u30c7\u30a3\u30f3\u30b0\u3059\u308c\u3070\u826f\u3044\uff0e<\/P>\r\n
\r\n
IX2215\u306e\u8a2d\u5b9a\u60c5\u5831\u3092\u5168\u3066\u8f09\u305b\u308b\u3068\u9577\u304f\u306a\u308b\u306e\u3067\u3001\u4eca\u56de\u306f\u4e3b\u8981\u90e8\u5206\u306e\u307f\u306b\u7d5e\u3063\u3066\u30b3\u30f3\u30d5\u30a3\u30b0\u30ec\u30fc\u30b7\u30e7\u30f3\u60c5\u5831\u3092\u7d39\u4ecb\u3059\u308b\u3053\u3068\u306b\u3059\u308b\uff0e<\/P>\r\n
\r\n
\r\n\r\n[ IPv4\u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u30eb\u30fc\u30c8\u3092 Transix AFTR \u3078\u5411\u3051\u308b ]\r\nip route default Tunnel0.0 \r\n\r\n  ...\r\n\r\n[ \u30bd\u30fc\u30b9\u30dd\u30ea\u30b7\u30fc\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u7528\u306eACL ]\r\nip access-list acl-vlan102 permit ip src 172.25.102.0\/24 dest any\r\nip access-list acl-vlan104 permit ip src 172.25.104.0\/24 dest any\r\n\r\n ...\r\n\r\n[ IPv6\u7528\u306eACL ]\r\nipv6 ufs-cache max-entries 10000\r\nipv6 ufs-cache enable\r\nipv6 dhcp enable\r\nipv6 access-list allow-outboud permit ip src any dest any\r\nipv6 access-list dhcpv6-list permit udp src any sport any dest any dport eq 546\r\nipv6 access-list dhcpv6-list permit udp src any sport any dest any dport eq 547\r\nipv6 access-list icmp6-all permit icmp src any dest any\r\nipv6 access-list icmp6-nd permit icmp neighbor-solicitation src any dest any\r\nipv6 access-list icmp6-nd permit icmp neighbor-advertisement src any dest any\r\nipv6 access-list icmp6-nd permit icmp redirect src any dest any\r\nipv6 access-list icmp6-nd permit icmp echo-reply src any dest any\r\nipv6 access-list icmp6-nd permit icmp echo src any dest any\r\nipv6 access-list ip-tunnel-allow permit 4 src any dest any\r\nipv6 access-list reject-all sequence-mode 100\r\nipv6 access-list reject-all 100 deny ip src any dest any\r\nipv6 access-list dynamic cache 65535\r\nipv6 access-list dynamic dyn-outbound access allow-outboud\r\n! \r\n ...\r\n\r\n[ \u5149(IP)\u96fb\u8a71\u63a5\u7d9a\u7528\u306eIPv4\u30d6\u30ea\u30c3\u30b8\u8a2d\u5b9a\uff08IPv6\u3092\u30ab\u30c3\u30c8\uff09 ]\r\nbridge irb enable\r\nno bridge 1 bridge ipv6\r\n\r\n...\r\n\r\n[ \u30bd\u30fc\u30b9\u30dd\u30ea\u30b7\u30fc\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u306e\u8a2d\u5b9a ]\r\nroute-map rtmap-us1 permit 10\r\n  match ip address access-list acl-vlan102\r\n  set interface Tunnel2.0\r\n!\r\nroute-map rtmap-fixed permit 10\r\n  match ip address access-list acl-vlan104\r\n  set interface Tunnel1.0\r\n!\r\n ...\r\n\r\n<\/code><\/pre>\r\n
\r\n
\u3053\u306e\u90e8\u5206\u306fIPoE\u74b0\u5883\u3067\u306e\u4e00\u822c\u7684\u306a\u8a2d\u5b9a\u306a\u306e\u3067\u7279\u306b\u5909\u308f\u3063\u305f\u90e8\u5206\u306f\u7121\u3044\u304c\u3001VLAN\u6bce\u306b\u63a5\u7d9a\u5148\u3092\u5207\u308a\u66ff\u3048\u308b\u30eb\u30fc\u30c8\u30de\u30c3\u30d7\u306e\u8a2d\u5b9a\u304c\u306a\u3058\u307f\u304c\u8584\u3044\u304b\u3082\u3057\u308c\u306a\u3044\uff0e\u3053\u306e\u30eb\u30fc\u30c8\u30de\u30c3\u30d7\u3067\u7279\u5b9a\u306eVLAN\u306b\u5bfe\u3057\u3066\u30bd\u30fc\u30b9\u30dd\u30ea\u30b7\u30fc\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3092\u884c\u308f\u306a\u3044\u3068\u3001IPv4\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u30eb\u30fc\u30c8\u3067\u3042\u308b\u3001Tunnel0.0 (Transix AFTR) \u3078\u5411\u3044\u3066\u3057\u307e\u3046\uff0e<\/p>\r\n
\r\n
\r\n
\r\n[ IPv6\u306eDHCP-PD\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e\u8a2d\u5b9a ]\r\nipv6 dhcp client-profile dhcpv6pd-client\r\n  option-request dns-servers\r\n  option-request ntp-servers\r\n  ia-pd subscriber GigaEthernet2:1.1 0:0:0:64::\/64 eui-64   <-- Transix AFTR\r\n  ia-pd subscriber GigaEthernet2:1.3 ::\/64 eui-64           <-- Transix BR\r\n  ia-pd subscriber GigaEthernet2:1.7 0:0:0:fa::\/64 eui-64   <-- \u7ba1\u7406\u7cfbNW\r\n!\r\n\r\n[ IPv6\u306eDHCP\u30b5\u30fc\u30d0\u306e\u8a2d\u5b9a ]\r\n\r\nipv6 dhcp server-profile dhcpv6pd-sv100\r\n  dns-server dhcp\r\n!\r\nipv6 dhcp server-profile dhcpv6pd-sv104\r\n  dns-server dhcp\r\n!\r\nipv6 dhcp server-profile dhcpv6pd-sv106\r\n  dns-server dhcp\r\n!\r\n ...\r\n \r\n[ Transix\u306e\u56fa\u5b9aIPv4\u30a2\u30c9\u30ec\u30b9\u5272\u308a\u5f53\u3066\u7528\u306eIPv6\u30c8\u30f3\u30cd\u30eb\u30a2\u30c9\u30ec\u30b9\u901a\u77e5 ] \r\nddns profile transix-update\r\n  url http:\/\/update.transix.jp\/request\r\n  query username=nnnnnnnn&password=abcdefghijk\r\n  transport ipv6\r\n  source-interface GigaEthernet2:1.3\r\n!\r\n ...\r\n\r\n<\/code><\/pre>\r\n
\r\n
\u6700\u521d\u306eIPv6\u306eDHCP-PD\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e\u8a2d\u5b9a\u90e8\u5206\u3067\u306f\u3001\u914d\u4e0b\u306e\u30bb\u30b0\u30e1\u30f3\u30c8(VLAN)\u306b\u5272\u308a\u5f53\u3066\u308b 64bit\u306e prefix \u3092\u8a2d\u5b9a\u3057\u3066\u3044\u308b\uff0eDHCPv6-PD\u306b\u3088\u308a\u914d\u5e03\u3055\u308c\u305f56bit\u306eprefix\u304b\u3089\u3001\u914d\u4e0b\u306e\u30bb\u30b0\u30e1\u30f3\u30c8\u306b\u5bfe\u3057\u3066\u4efb\u610f\u306eprefix\u3092\u5272\u308a\u5f53\u3066\u308b\u3053\u3068\u304c\u53ef\u80fd\u3060\u3002<\/p>\r\n
\r\n
Dynamic DNS (DDNS)\u306e\u8a2d\u5b9a\u306b\u3064\u3044\u3066\u306f\u4ee5\u524d\u306e\u8a18\u4e8b\u300eInterlink\u306eZOOT NATIVE \u30b5\u30fc\u30d3\u30b9\u304cTransix \u56fa\u5b9aIPv4 \u65b9\u5f0f\u306b\u5bfe\u5fdc\u300f<\/a>\u3067\u7d39\u4ecb\u3057\u3066\u3044\u308b\u304c\u3001Transix\u306e\u56fa\u5b9aIPv4\u30b5\u30fc\u30d3\u30b9\u3092\u5229\u7528\u3059\u308b\u4e0a\u3067\u5fc5\u9808\u3068\u306a\u308b\u3001\u3053\u3061\u3089\uff08IX2215\uff09\u5074\u306eIPv6\u30c8\u30f3\u30cd\u30eb\u306e\u30a2\u30c9\u30ec\u30b9\u306b\u95a2\u3059\u308b\u60c5\u5831\uff08\u6b63\u78ba\u306b\u306fIPv6 prefix\u60c5\u5831\uff09\u3067\u3001Transix\u5074\u306eBridge Router\u5074\u3067\u306f\u3001\u3053\u306eDDNS\u6a5f\u80fd\u3092\u4f7f\u3063\u3066\u901a\u77e5\u3055\u308c\u305fprefix\u60c5\u5831\u3068\u5f37\u5236\u6307\u5b9a\u3057\u3066\u3044\u308b\u30c7\u30d0\u30a4\u30b9\u30a2\u30c9\u30ec\u30b9(::feed)\u306b\u3088\u308a\u3001\u3053\u3061\u3089\u5074\u306e\u6b63\u78ba\u306aIPv6\u30c8\u30f3\u30cd\u30eb\u306e\u30a2\u30c9\u30ec\u30b9\u3092\u53d6\u5f97\u3057\u3066\u3044\u308b \uff0e<\/p>\r\n
\r\n
\r\n
\r\n[ IX2215\u306e\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9\u8a2d\u5b9a ]\r\n\r\ndevice GigaEthernet0\r\n!\r\ndevice GigaEthernet1\r\n!\r\ndevice GigaEthernet2        <-- 8\u500b\u306eSW\u30dd\u30fc\u30c8\uff08GE2)\u30924\u7d44\u306e\u30dd\u30fc\u30c8VLAN\u306b\u5206\u5272\r\n  vlan-group 1 port 1 2\r\n  vlan-group 2 port 3 4\r\n  vlan-group 3 port 5 6\r\n  vlan-group 4 port 7 8\r\n!\r\n\r\n ...\r\n\r\ninterface GigaEthernet0.0\r\n  description Transix IPoE PD\r\n  no ip address\r\n  ipv6 enable\r\n  ipv6 dhcp client dhcpv6pd-client\r\n  ipv6 filter dhcpv6-list 1 in\r\n  ipv6 filter icmp6-all 2 in\r\n  ipv6 filter icmp6-nd 4 in\r\n  ipv6 filter ip-tunnel-allow 5 in\r\n  ipv6 filter reject-all 100 in\r\n  ipv6 filter dhcpv6-list 1 out\r\n  ipv6 filter icmp6-all 2 out\r\n  ipv6 filter ip-tunnel-allow 5 out\r\n  ipv6 filter dyn-outbound 100 out\r\n  no shutdown\r\n!\r\ninterface GigaEthernet1.0\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000<-- \u5149\u96fb\u8a71\u4e2d\u7d99\u7528\u306eIPv4 only\u30d6\u30ea\u30c3\u30b8\uff08WAN\u5074\uff09\r\n  description SIP-IPv4-Only-Bridge.      (ONU \u21d2 GE1.0 --BRIDGE-- GE2:2.0 \u21d2 NVR500\uff09\r\n  no ip address\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u203b\u3053\u306e\u30d6\u30ea\u30c3\u30b8\u3067IPv6\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u5168\u3066\u30ab\u30c3\u30c8\u3057\u3066\u3044\u308b\r\n  bridge-group 1\r\n  no shutdown\r\n!\r\ninterface GigaEthernet2.0\r\n  no ip address\r\n  shutdown\r\n!\r\n\r\n ...\r\n\r\ninterface GigaEthernet2:1.1\r\n  description VLAN100-Dual\r\n  encapsulation dot1q 100 tpid 8100\r\n  auto-connect\r\n  ip address 172.25.100.254\/24\r\n  ip dhcp binding vlan100profile\r\n  ipv6 enable\r\n  ipv6 interface-identifier 00:00:00:00:00:00:00:fe\r\n  ipv6 dhcp server dhcpv6pd-sv100\r\n  ipv6 nd ra enable\r\n  ipv6 nd ra other-config-flag\r\n  no shutdown\r\n!\r\ninterface GigaEthernet2:1.2         \r\n  description VLAN102-USTunnel1\r\n  encapsulation dot1q 102 tpid 8100\r\n  auto-connect\r\n  ip address 172.25.102.254\/24\r\n  ip dhcp binding vlan102profile\r\n  ip policy route-map rtmap-us1           <-- outbound\u901a\u4fe1\u3092Tunnel2.0 \u3078\u632f\u308a\u5411\u3051\u308b\r\n  ipv6 enable\r\n  ipv6 address 2409:xx:yyyy:zz66::00fe\/64\r\n  no shutdown\r\n!\r\ninterface GigaEthernet2:1.3\u3000\u3000\u3000\u3000\u3000\r\n  description Transix Fixed IPv4\r\n  encapsulation dot1q 104 tpid 8100\r\n  auto-connect\r\n  ip address 172.25.104.254\/24\r\n  ip dhcp binding vlan104profile\r\n  ip policy route-map rtmap-fixed         <-- outbound\u901a\u4fe1\u3092Tunnel1.0 (BR)\u3078\u632f\u308a\u5411\u3051\u308b\r\n  ipv6 enable\r\n  ipv6 interface-identifier 00:00:00:00:00:00:fe:ed  <-- \u6307\u5b9a\u3055\u308c\u305f\u30c7\u30d0\u30a4\u30b9\u30a2\u30c9\u30ec\u30b9\r\n  ipv6 dhcp server dhcpv6pd-sv104\r\n  ipv6 nd ra enable\r\n  ipv6 nd ra other-config-flag\r\n  no shutdown\r\n!\r\ninterface GigaEthernet2:1.4\r\n  description VLAN106-IPv6-Only\r\n  encapsulation dot1q 106 tpid 8100\r\n  auto-connect\r\n  no ip address\r\n  ipv6 enable\r\n  ipv6 interface-identifier 00:00:00:00:00:00:00:fe\r\n  ipv6 dhcp server dhcpv6pd-sv106\r\n  ipv6 nd ra enable\r\n  ipv6 nd ra other-config-flag\r\n  no shutdown\r\n!\r\n  ...\r\n\r\ninterface GigaEthernet2:2.0.            <-- \u5149\u96fb\u8a71\u30eb\u30fc\u30bf\u63a5\u7d9a\u7528\u306eIPv4only\u30d6\u30ea\u30c3\u30b8\uff08LAN\u5074\uff09\r\n  description IP-Phone-SIP-IPv4-Only.   (\u3053\u306e\u30dd\u30fc\u30c8\u306bSIP\u7528\u30eb\u30fc\u30bf NVR500 \u3092\u63a5\u7d9a\u3057\u3066\u3044\u308b\uff09\r\n  no ip address\r\n  bridge-group 1\r\n  no shutdown\r\n!\r\n  ...\r\n\r\n<\/code><\/pre>\r\n
\u3053\u306e\u90e8\u5206\u306e\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9\u8a2d\u5b9a\u306b\u3064\u3044\u3066\u3082\u3001\u904e\u53bb\u306e\u8a18\u4e8b\u3067\u7d39\u4ecb\u3057\u3066\u3044\u308b\u306e\u3067\u3053\u3053\u3067\u306f\u7d30\u304b\u306a\u8aac\u660e\u306f\u884c\u308f\u306a\u3044\uff0e\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30c8\u30f3\u30cd\u30eb\u7528\u306e GigaEthernet2:1.2 \u3067\u306f\u3001IPv6\u30a2\u30c9\u30ec\u30b9\u3092\u624b\u52d5\u3067\u5272\u308a\u5f53\u3066\u3044\u308b\u304c\u3001\u3053\u306eNW\u30bb\u30b0\u30e1\u30f3\u30c8\u306b\u63a5\u7d9a\u3055\u308c\u305f\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30c7\u30d0\u30a4\u30b9\u306b\u5bfe\u3057\u3066\u306f\u3001IPv6\u30a2\u30c9\u30ec\u30b9\u306e\u81ea\u52d5\u5272\u308a\u5f53\u3066\u3092\u884c\u308f\u306a\u3044\u8a2d\u5b9a\u3068\u3057\u3066\u3044\u308b\uff0e\uff08\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304b\u3089\u76f4\u63a5IPv6\u901a\u4fe1\u304c\u884c\u308f\u308c\u3066\u3057\u307e\u3046\u3068\u3001IPoE\u3067\u5272\u308a\u5f53\u3066\u3089\u308c\u305fprefix\u306e\u307e\u307e\u3067\u901a\u4fe1\u304c\u884c\u308f\u308c\u3066\u3057\u307e\u3046\u305f\u3081\u3001IPv4\u3068IPv6\u306e\u7d4c\u8def\u304c\u30d0\u30e9\u30d0\u30e9\u306b\u306a\u3063\u3066\u3057\u307e\u3046\uff09<\/p>\r\n
\r\n
\"ipv6 interface-identifier\"\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067EUI64\u5f62\u5f0f\u3067\u8a2d\u5b9a\u3055\u308c\u308b\u30c7\u30d0\u30a4\u30b9\u30a2\u30c9\u30ec\u30b9\u3092\u30aa\u30fc\u30d0\u30e9\u30a4\u30c9\u3059\u308b\u305f\u3081\u306e\u8a2d\u5b9a\u3067\u3001\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9\u306eMAC\u30a2\u30c9\u30ec\u30b9\u60c5\u5831\u3092\u5916\u90e8\u306b\u6652\u3057\u305f\u304f\u306a\u3044\u5834\u5408\u3084\u3001\u624b\u52d5\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3092\u3055\u305b\u305f\u3044\u5834\u5408\u306a\u3069\u306b\u3001\"::1\" \u3084 \"::fe\" \u306a\u3069\u306e\u5358\u7d14\uff08\u7c21\u5358\uff09\u306a\u30c7\u30d0\u30a4\u30b9\u30a2\u30c9\u30ec\u30b9\u3092\u5272\u308a\u5f53\u3066\u308b\u76ee\u7684\u3067\u4f7f\u3046\u3053\u3068\u304c\u53ef\u80fd\u3060\uff0e<\/p>\r\n
\r\n
\r\n[ Transix \u5171\u6709IPv4(AFTR)\u63a5\u7d9a\u7528\u30c8\u30f3\u30cd\u30eb ]\r\ninterface Tunnel0.0\r\n  description Transix AFTR\r\n  tunnel mode 4-over-6\r\n  tunnel destination 2404:8e00::feed:102     <-- Transix AFTR Router Address\r\n  tunnel source GigaEthernet2:1.1\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\uff08DS-Lite\u30b5\u30fc\u30d3\u30b9\u7528\uff09\r\n  ip unnumbered GigaEthernet2:1.1\r\n  ip tcp adjust-mss auto\r\n  ip napt enable\r\n  no shutdown\r\n!\r\n\r\n[ Transix \u56fa\u5b9aIPv4\u63a5\u7d9a\u7528\u30c8\u30f3\u30cd\u30eb ]\r\ninterface Tunnel1.0\r\n  description Interlink IPoE Fixed IP\r\n  tunnel mode 4-over-6\r\n  tunnel destination 2404:8e00::feed:141    <-- Transix BR Router Address\r\n  tunnel source GigaEthernet2:1.3\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\uff08\u56fa\u5b9aIP\u63a5\u7d9a\u7528\u306eBridge Router)\r\n  ip address 217.aaa.bbb.ccc\/32             <--  \u5272\u308a\u5f53\u3066\u3089\u308c\u305f\u56fa\u5b9aIPv4\u30a2\u30c9\u30ec\u30b9\r\n  ip tcp adjust-mss auto\r\n  ip napt enable\r\n  ip napt service sslvpn 172.25.104.251 none tcp nnnnnn  <-- SSLVPN\u7528\u306e\u901a\u4fe1\u3092port forward\r\n  no shutdown\r\n!\r\n\r\n[ \u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30c8\u30f3\u30cd\u30eb(USGW1\uff09 ]\r\ninterface Tunnel2.0\r\n  description VPN-Gateway-US\r\n  tunnel mode 4-over-6\r\n  tunnel adjust-mtu 1400\r\n  tunnel destination 2001:----:-----:----:----:----:----:7d89 \r\n  tunnel source GigaEthernet2:1.2\r\n  ip address 192.0.0.2\/30          <-- \u30c8\u30f3\u30cd\u30eb\u306e\u4e21\u7aef\u306bIPv4\u30a2\u30c9\u30ec\u30b9\u3092\u8a2d\u5b9a\u3057\u3066\u3044\u308b\uff08\u81ea\u5206\u5074\uff09\r\n  ip tcp adjust-mss auto\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000\uff08\u5bfe\u5411\u5074\u306f 192.0.0.1\/30\uff09\r\n  ip napt enable\r\n  no shutdown\r\n!\r\n<\/code><\/pre>\r\n
\r\n
\u5148\u306b\u8aac\u660e\u3057\u305f\u3088\u3046\u306b\u3001VLAN104\u306e\u30bb\u30b0\u30e1\u30f3\u30c8\u3067\u306f\u3001PC\u306a\u3069\u306e\u4e00\u822c\u7684\u306a\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30c7\u30d0\u30a4\u30b9\u306fTunnel 1.0\u306b\u5272\u308a\u5f53\u3066\u3089\u308c\u305f\u56fa\u5b9a\u30b0\u30ed\u30fc\u30d0\u30ebIPv4\u30a2\u30c9\u30ec\u30b9\u3067NAPT\u5909\u63db\u3055\u308c\u3066\u51fa\u3066\u884c\u304f\u306e\u3067\u3001\u4f01\u696d\u3084\u7d44\u7e54\u306eNW\u7ba1\u7406\u3092\u30ea\u30e2\u30fc\u30c8\u3067\u884c\u3044\u305f\u3044\u5834\u5408\u3084\u3001\u76f8\u624b\u5148\u3068\u306e\u9593\u3067IPSec\u30c8\u30f3\u30cd\u30eb\u3092\u5f35\u308b\u306b\u306f\u90fd\u5408\u304c\u826f\u3044\uff0e<\/p>\r\n
\r\n
Transix\u306e\u56fa\u5b9aIP\u30b5\u30fc\u30d3\u30b9\u3092\u7533\u3057\u8fbc\u3080\u3068\u3001\u56fa\u5b9aIP\u30b5\u30fc\u30d3\u30b9\u3060\u3051\u3067\u306f\u306a\u304f\u901a\u5e38\u306eAFTR\u306b\u3088\u308b\u5171\u6709IP\u30b5\u30fc\u30d3\u30b9\u3068\u3082\u4f75\u7528\u53ef\u80fd\u306a\u306e\u3067\u3001\u4e00\u822c\u5bb6\u5ead\u3067\u306f\u5bb6\u65cf\u7528\u306b\u5171\u6709IP\u30b5\u30fc\u30d3\u30b9\u3001\u4ed5\u4e8b\u95a2\u4fc2\u3067\u306f\u56fa\u5b9aIP\u30b5\u30fc\u30d3\u30b9\u306e\u3088\u3046\u306a\u4f7f\u3044\u5206\u3051\u304c\u53ef\u80fd\u3060\uff0e\uff08\u56fa\u5b9aIP\u30b5\u30fc\u30d3\u30b9\u306f\u8ffd\u52a0\u30aa\u30d7\u30b7\u30e7\u30f3\u7684\u306a\u4f4d\u7f6e\u4ed8\u3051\u306e\u3088\u3046\u3060\uff09<\/p>\r\n
\r\n
\u53c2\u8003\u307e\u3067\u306b\u3001\u4e0a\u8a18\u30b3\u30f3\u30d5\u30a9\u30b0\u30ec\u30fc\u30b7\u30e7\u30f3\u3067\u306eIX2215-01\u306e\u63a5\u7d9a\u60c5\u5831\u3092\u8f09\u305b\u3066\u304a\u304f\uff0e<\/p>\r\n
\r\n
\r\n\r\n[ DDNS\u306e\u30b9\u30c6\u30fc\u30bf\u30b9\u60c5\u5831\u3000]\r\n\r\nNix2215-01(config)# show ddns\r\nprofile-name : transix-update\r\n  Registered time : 2022\/08\/15 19:52:55\r\n  IPv6 address    : 2409:xx:yyyy:zz00::feed\r\n  result\r\n    HTTP\/1.1 200 OK\r\n    Date: Mon, 15 Aug 2022 10:52:56 GMT\r\n    Server: Apache\/2.4.6 (CentOS) OpenSSL\/1.0.2k-fips\r\n    X-Frame-Options: SAMEORIGIN\r\n    X-XSS-Protection: 1; mode=block\r\n    X-Content-Type-Options: nosniff\r\n    X-Download-Options: noopen\r\n    X-Permitted-Cross-Domain-Policies: none\r\n    Referrer-Policy: strict-origin-when-cross-origin\r\n    Content-Type: text\/plain; charset=utf-8\r\n    ETag: W\/\"565339bc4d33d72817b583024112eb7f\"\r\n    Cache-Control: max-age=0, private, must-revalidate\r\n    X-Request-Id: db950d51-0bd8-47d8-934c-02e386dc2b2a\r\n    X-Runtime: 0.025926\r\n    Connection: close\r\n\r\n    OK\r\n\r\n[ DHCPv6-PD\u3067\u53d6\u5f97\u3057\u305fIPV6\u95a2\u9023\u306e\u60c5\u5831 ]\r\n\r\nix2215-01(config)# show ipv6 dhcp client\r\nDHCPv6 client is enabled\r\n  System DUID 00:03:00:01:00:60:b9:e2:46:24\r\n  Statistics:\r\n    Solicit-advertise(reply):\r\n      1 send, 117 seconds ago\r\n      1 receive, 0 drops, 117 seconds ago\r\n    Request-reply:\r\n      1 send, 116 seconds ago\r\n      1 receive, 0 drops, 116 seconds ago\r\nInterface GigaEthernet0.0 is active\r\n  Server address fe80::2a6f:7fff:fe2a:17c1\r\n  Server identifier 00:03:00:01:00:0d:5e:c4:c3:4c\u3000<-- \u30c7\u30d5\u30a9\u30eb\u30c8\u8a2d\u5b9a\u3067\u5272\u308a\u5f53\u3066\u3089\u308c\u305f\u30a2\u30c9\u30ec\u30b9\r\n  Uptime 0:01:59\r\n  Prefix Delegation:\r\n    T1 is 7200, T2 is 10800, renew 7083 seconds\r\n  IA Prefix:\r\n    2409:xx:yyyy:zz00::\/56 vltime 14400 pltime 12600, expire 14283 seconds\r\n  DNS Servers:\r\n    2404:1a8:7f01:a::3\r\n    2404:1a8:7f01:b::3\r\n  NTP Servers:\r\n    2404:1a8:1102::a\r\n    2404:1a8:1102::b\r\n  Subscribers:\r\n    GigaEthernet2:1.1 is up\r\n      2409:xx:yyyy:zz64::fe\/64   <-- Interface Identifier\u3067\u8a2d\u5b9a\u3057\u305f\u30a2\u30c9\u30ec\u30b9\uff08 \"::fe\"\uff09\r\n    GigaEthernet2:1.3 is up\r\n      2409:xx:yyyy:zz00::feed\/64\r\n    GigaEthernet2:1.4 is up\r\n      2409:xx:yyyy:zz6a::fe\/64\r\n    GigaEthernet2:1.7 is up\r\n      2409:xx:yyyy:zzfa::fe\/64\r\n  Statistics:\r\n    Solicit-advertise(reply):\r\n      1 send, 119 seconds ago\r\n      1 receive, 0 drops, 119 seconds ago\r\n    Request-reply:\r\n      1 send, 118 seconds ago\r\n      1 receive, 0 drops, 118 seconds ago\r\nix2215-01(config)#                            \r\n\r\n[ \u56fa\u5b9aIP\u7528\u30c8\u30f3\u30cd\u30eb\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9 Tunnel1.0 \u306e\u60c5\u5831 ]\r\n\r\nix2215-01(config)#  show int Tunnel1.0\r\nInterface Tunnel1.0 is up\r\n  Description: Interlink IPoE Fixed IP\r\n  Fundamental MTU is 1460 octets\r\n  Current bandwidth 1G b\/s, QoS is disabled\r\n  Datalink header cache type is ipv6-tunnel: 0\/0 (standby\/dynamic)\r\n  IPv4 subsystem connected, physical layer is up, 0:28:12\r\n  Dialer auto-connect is enabled\r\n  Inbound call is enabled\r\n  Outbound call is enabled\r\n  Dial on demand restraint is disabled, 0 disconnect\r\n  SNMP MIB-2:\r\n    ifIndex is 1203\r\n  Logical INTERFACE:\r\n    Elapsed time after clear counters 0:28:40\r\n    302 packets input, 153224 bytes, 0 errors\r\n      302 unicasts, 0 non-unicasts, 0 unknown protos\r\n      0 drops, 0 misc errors\r\n    210 output requests, 41682 bytes, 0 errors\r\n      210 unicasts, 0 non-unicasts\r\n      0 overflows, 0 neighbor unreachable, 0 misc errors\r\n    1 link-up detected, 0 link-down detected\r\n  Encapsulation TUNNEL:\r\n    Tunnel mode is 4-over-6\r\n    Tunnel is ready\r\n    Destination address is 2404:8e00::feed:141\r\n    Source address is 2409:xx:yyyy:zz00::feed\r\n    Source interface GigaEthernet2:1.3\r\n    Nexthop address is fe80::2a6f:7fff:fe2a:17c1\r\n    Outgoing interface is GigaEthernet0.0\r\n    Interface MTU is 1460\r\n    Path MTU is 1500\r\n    Statistics:\r\n      302 packets input, 153224 bytes, 0 errors\r\n      210 packets output, 41682 bytes, 0 errors\r\n    Received ICMP messages:\r\n      0 errors\r\nix2215-01(config)#  \r\n\r\n[ \u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30c8\u30f3\u30cd\u30eb\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9 Tunnel2.0 \u306e\u60c5\u5831 ]\r\n\r\nix2215-01(config)# show int Tunnel2.0\r\nInterface Tunnel2.0 is up\r\n  Description: VPN-Gateway-US\r\n  Fundamental MTU is 1400 octets\r\n  Current bandwidth 1G b\/s, QoS is disabled\r\n  Datalink header cache type is ipv6-tunnel: 0\/0 (standby\/dynamic)\r\n  IPv4 subsystem connected, physical layer is up, 0:01:06\r\n  Dialer auto-connect is enabled\r\n  Inbound call is enabled\r\n  Outbound call is enabled\r\n  Dial on demand restraint is disabled, 0 disconnect\r\n  SNMP MIB-2:\r\n    ifIndex is 1204\r\n  Logical INTERFACE:\r\n    Elapsed time after clear counters 0:01:32\r\n    318 packets input, 133304 bytes, 0 errors\r\n      318 unicasts, 0 non-unicasts, 0 unknown protos\r\n      0 drops, 0 misc errors\r\n    344 output requests, 96614 bytes, 0 errors\r\n      344 unicasts, 0 non-unicasts\r\n      0 overflows, 0 neighbor unreachable, 0 misc errors\r\n    1 link-up detected, 0 link-down detected\r\n  Encapsulation TUNNEL:\r\n    Tunnel mode is 4-over-6\r\n    Tunnel is ready\r\n    Destination address is 2001:----:----:----:----:----:----:7d89\r\n    Source address is 2409:xx:yyyy:zz66::fe\r\n    Source interface GigaEthernet2:1.2\r\n    Nexthop address is fe80::2a6f:7fff:fe2a:17c1\r\n    Outgoing interface is GigaEthernet0.0\r\n    Interface MTU is 1400\r\n    Path MTU is 1500\r\n    Statistics:\r\n      318 packets input, 133304 bytes, 0 errors\r\n      344 packets output, 96614 bytes, 0 errors\r\n    Received ICMP messages:\r\n      0 errors\r\nix2215-01(config)#  \r\n\r\n[ IPv4 over IPv6 \u30c8\u30f3\u30cd\u30eb\u306e\u5bfe\u5411(USGW1)\u5074IPv4\u30a2\u30c9\u30ec\u30b9\u3078\u306eping\u758e\u901a\u78ba\u8a8d]\r\nix2215-01(config)# ping 192.0.0.1\r\nPING 192.0.0.2 > 192.0.0.1 56 data bytes\r\n64 bytes from 192.0.0.1: icmp_seq=0 ttl=64 time=92.598 ms\r\n64 bytes from 192.0.0.1: icmp_seq=1 ttl=64 time=92.134 ms\r\n64 bytes from 192.0.0.1: icmp_seq=2 ttl=64 time=91.907 ms\r\n64 bytes from 192.0.0.1: icmp_seq=3 ttl=64 time=92.429 ms\r\n64 bytes from 192.0.0.1: icmp_seq=4 ttl=64 time=92.423 ms\r\n\r\n--- 192.0.0.1 ping statistics ---\r\n5 packets transmitted, 5 packets received, 0% packet loss\r\nround-trip (ms)  min\/avg\/max = 91.907\/92.298\/92.598\r\nix2215-01(config)# \r\n\r\n<\/code><\/pre>\r\n
\r\n
Fortigate 50E-2\u53f7\u6a5f\u3067\u306f\u3001\u30a4\u30f3\u30bf\u30fc\u30ea\u30f3\u30af\u306e PPPoE\u65b9\u5f0f\u306b\u3088\u308b\u56fa\u5b9aIPv4\u63a5\u7d9a\u30b5\u30fc\u30d3\u30b9 \"ZOOT NEXT\" \u3092\u7528\u3044\u3066\u3044\u308b\u304c\u3001\u4eca\u56de\u306e\u691c\u8a3c\u3067\u306f\u3053\u306ePPPoE\u63a5\u7d9a\u3092IPoE\u56fa\u5b9aIP\u63a5\u7d9a\u3068NURO\u74b0\u5883\u3067\u306e\u30dd\u30fc\u30c8\u30d5\u30a9\u30ef\u30fc\u30c7\u30a3\u30f3\u30b0\u306b\u7f6e\u304d\u63db\u3048\u3089\u4e8b\u304c\u53ef\u80fd\u304b\u3069\u3046\u304b\u304c\u91cd\u8981\u306a\u691c\u8a3c\u30dd\u30a4\u30f3\u30c8\u3060\uff0e<\/p>\r\n
\r\n
\u4eca\u56de\u306f\u672c\u756a\u904b\u7528\u4e2d\u306eFortigate 50E-2\u53f7\u6a5f\u306e\u4ee3\u308f\u308a\u306b\u3001Fortigate 50E-1\u53f7\u6a5f\u3092\u691c\u8a3c\u6a5f\u3068\u3057\u3066\u4f7f\u7528\u3059\u308b\u3053\u3068\u306b\u3059\u308b\u3002<\/p>\r\n
\r\n
\u4e0a\u8a18\u306e\u4f8b\u3067\u306f\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30c7\u30d0\u30a4\u30b9\u7528\u306eNAPT\u3068SSLVPN\u63a5\u7d9a\u5f85\u3061\u53d7\u3051\u7528\u306e\u30dd\u30fc\u30c8\u30d5\u30a9\u30ef\u30fc\u30c7\u30a3\u30f3\u30b0\u3092\u517c\u7528\u3068\u3057\u3066\u3044\u308b\uff0e\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30c7\u30d0\u30a4\u30b9\u7528\u306eNAPT\u304c\u5fc5\u8981\u306a\u3051\u308c\u3070\u3001\u5358\u7d14\u306b1\u5bfe1\u306e\u9759\u7684NAT\u306b\u3088\u3063\u3066SSLVPN\u901a\u4fe1\u3092\u76f4\u63a5\u5f85\u3061\u53d7\u3051\u308bNAT\u65b9\u5f0f\u306e\u65b9\u304c\u5358\u7d14\u3067\u4fe1\u983c\u6027\u304c\u9ad8\u3044\u3060\u308d\u3046\uff0e<\/P>\r\n
\r\n
IX2215\u306eACL\u3067\u5236\u5fa1\u3059\u308b\u3088\u308a\u3001Fortigate\u5074\u306eFW\u6a5f\u80fd\u306e\u65b9\u304c\u3088\u308a\u7d30\u304b\u306a\u30dd\u30ea\u30b7\u30fc\u5236\u5fa1\u3092\u884c\u3046\u3053\u3068\u304c\u53ef\u80fd\u306a\u306e\u3067\u3001\u3053\u306e\u5f8c\u3067\u8aac\u660e\u3059\u308bNAT\u65b9\u5f0f\u3092\u5229\u7528\u3059\u308b\u65b9\u304c\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fc\u9762\u3067\u306f\u597d\u307e\u3057\u3044\u3060\u308d\u3046\u3002<\/p>\r\n
\r\n
\u3068\u308a\u3042\u3048\u305a\u3053\u3053\u3067\u306fNAPT\u4f75\u7528\u74b0\u5883\u4e0b\u3067\u3001\u554f\u984c\u306a\u304fFortigate\u306eSSVPN\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3092\u7528\u3044\u3066VPN\u63a5\u7d9a\u53ef\u80fd\u3067\u6709\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3066\u304a\u304f\u3053\u3068\u306b\u3059\u308b\uff0e<\/p>\r\n
\r\n
\r\n
\r\n\"VPN \r\n
\r\n
\r\n\"FG50E\r\n
\r\nNAPT\u65b9\u5f0f\u3067\u3082\u554f\u984c\u306a\u304fSSLVPN\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30a2\u30d7\u30ea\u3067\u63a5\u7d9a\u3067\u304d\u308b\u3053\u3068\u304c\u78ba\u8a8d\u3067\u304d\u305f<\/span>\r\n
\r\n<\/div>\r\n
\r\n
\r\n
NAT\u3092\u7528\u3044\u305fFortigate(SSLVPN)\u3068\u306e\u63a5\u7d9a\u4f8b<\/h4>\r\n
\r\n
NAPT\u3092\u884c\u308f\u305a\u306b1\u5bfe1\u306e\u9759\u7684NAT\u5909\u63db\u3092\u7528\u3044\u3066SSLVPN\u6a5f\u5668\u306a\u3069\u3092\u63a5\u7d9a\u3059\u308b\u5834\u5408\u306f\u3001Tuunel1.0 \u306e\u8a2d\u5b9a\u90e8\u5206\u3067\u3001NAPT\u306e\u6307\u5b9a\u90e8\u5206\u3092\u5358\u7d14\u306bNAT\u306b\u5909\u66f4\u3059\u308c\u3070\u826f\u3044\uff0e\u4eca\u56de\u306f\u3001VLAN104\u914d\u4e0b\u306e\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306fFortigate 50E-1\u306eLAN\u5074\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9\u7d4c\u7531\u3067NAPT\u5909\u63db\u3055\u308c\u3001VLAN199\u5074\u306e\u30d6\u30ea\u30c3\u30b8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u304b\u3089IX2215-01\u306eNAT\u5909\u63db\u306b\u3088\u308a\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u5074\u3078\u629c\u3051\u308b\u69cb\u6210\u3068\u306a\u308b\uff0e<\/p>\r\n
\r\n
\r\n
\r\n\"IPoE\r\n
\r\nNAT\u306b\u3088\u308a\u76f4\u63a5Fortigate\u306eWAN\u30dd\u30fc\u30c8\u306b\u63a5\u7d9a\u3059\u308b\u69cb\u6210\u4f8b<\/span>\r\n
\r\n<\/div>\r\n
\r\n\r\n
\u3053\u306e\u69cb\u6210\u3067\u3042\u308c\u3070\u3001VLAN104\u5074\u306e\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3082\u8a2d\u5b9a\u3092\u5909\u66f4\u3059\u308b\u3053\u3068\u306a\u304f\u3001IPv4\u901a\u4fe1\u306b\u95a2\u3057\u3066\u306f\u56fa\u5b9aIP\u30a2\u30c9\u30ec\u30b9\u306b\u3088\u308bNAPT\u3067\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u63a5\u7d9a\u304c\u53ef\u80fd\u3060\uff0eFortigate\u5074\u306e\u8a2d\u5b9a\u6b21\u7b2c\u3067\u306f\u3001VLAN104\u914d\u4e0b\u306b\u3082IPv6\u30a2\u30c9\u30ec\u30b9\u3067\u306e\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u304c\u53ef\u80fd\u3068\u306a\u308a\u305d\u3046\u3060\u304c\u3001Fortigate\u306eIPv6\u8a2d\u5b9a\u306b\u95a2\u3059\u308b\u60c5\u5831\u304c\u4e0d\u8db3\u3057\u3066\u3044\u308b\u306e\u3067\u3001\u4eca\u56de\u306fIPv4\u3067\u306e\u63a5\u7d9a\u3060\u3051\u3092\u884c\u3046\u3053\u3068\u306b\u3059\u308b\uff0e<\/p>\r\n
\r\n
Fortigate\u306e\u65b0\u3057\u3044\u6a5f\u7a2e\u3084\u4e0a\u4f4d\u6a5f\u7a2e(Fotigate 60F\u306a\u3069\uff09\u3067\u306f\u3001IPoE\u306b\u95a2\u3059\u308b\u8a2d\u5b9a\u304c\u53ef\u80fd\u306aFortiOS 7\u7cfb\u304c\u4f7f\u3048\u308b\u69d8\u3060\u304c\u3001\u6b8b\u5ff5\u306a\u304c\u3089\u79c1\u306eFortigate 50E\u30b7\u30ea\u30fc\u30ba\u3067\u306f\u3001FortiOS 7\u306b\u306f\u5bfe\u5fdc\u3057\u3066\u3044\u306a\u3044\uff0eFortiOS 7 \u3067\u306e Tarnsix \u56fa\u5b9aIPv4\u30b5\u30fc\u30d3\u30b9\u306e\u8a2d\u5b9a\u4f8b\u304c\u516c\u958b\u3055\u308c\u3066\u3044\u308b\u306e\u3067\u3001FortiOS 7\u7cfb\u304c\u5229\u7528\u53ef\u80fd\u306a\u5834\u5408\u306f\u3001\u4e00\u5ea6\u76ee\u3092\u901a\u3057\u3066\u304a\u304f\u3068\u826f\u3044\u3060\u308d\u3046\uff0e<\/p>\r\n
\r\n
Fortigate\u306b\u9650\u3089\u305a\u3001Cisco, Juniper\u306a\u3069\u306e\u6d77\u5916\u306e\u30e1\u30b8\u30e3\u30fc\u30e1\u30fc\u30ab\u306e\u88fd\u54c1\u306b\u95a2\u3057\u3066\u306f\u3001\u65e5\u672c\u306e\u72ec\u81ea\u4ed5\u69d8\u306e\u30b5\u30fc\u30d3\u30b9\u306b\u5bfe\u3059\u308b\u9069\u5408\u6027\u306f\u4f4e\u3044\u306e\u3067\u3001NEC\u306a\u3069\u306e\u65e5\u672c\u306e\u30e1\u30fc\u30ab\u30fc\u306e\u30eb\u30fc\u30bf\u88fd\u54c1\u3092\u4f7f\u7528\u3059\u308b\u306e\u304c\u7121\u96e3\u306a\u3088\u3046\u3060\u3002<\/p>\r\n
\r\n
 [ Transit DS-Lite ] 
\r\n\u300eFortiGate IPoE\u8a2d\u5b9a\u30ac\u30a4\u30c9 \u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u30de\u30eb\u30c1\u30d5\u30a3\u30fc\u30c9\u682a\u5f0f\u4f1a\u793e transix DS-Lite\u30b5\u30fc\u30d3\u30b9\u7de8\u300f<\/a>\r\n
\r\n
 [ Transit \u56fa\u5b9aIP\u30b5\u30fc\u30d3\u30b9 ] 
\r\n\u300eFortiGate IPoE\u8a2d\u5b9a\u30ac\u30a4\u30c9 \u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u30de\u30eb\u30c1\u30d5\u30a3\u30fc\u30c9\u682a\u5f0f\u4f1a\u793e transix \u56fa\u5b9aIP\u30b5\u30fc\u30d3\u30b9\u7de8\u300f<\/a>\r\n
\r\n
\r\n
\r\n\r\nroute-map rtmap-vl199 permit 10\r\n  match ip address access-list acl-vlan199\r\n  set interface Tunnel1.0\r\n!\r\n ...\r\n\r\nipv6 dhcp client-profile dhcpv6pd-client\r\n  option-request dns-servers\r\n  option-request ntp-servers\r\n  ia-pd subscriber GigaEthernet2:1.1 0:0:0:64::\/64 eui-64\r\n  ia-pd subscriber GigaEthernet2:1.4 0:0:0:6a::\/64 eui-64\r\n  ia-pd subscriber GigaEthernet2:1.7 0:0:0:fa::\/64 eui-64\r\n  ia-pd subscriber GigaEthernet2:3.0 ::\/64 eui-64 <-- \u56fa\u5b9aIP\u63a5\u7d9a\u7528\u306eIF\uff08GE2:3.0\u3078\u5909\u66f4\uff09\r\n!\r\n\u3000...\r\n\r\n[ Transix\u306e\u56fa\u5b9aIPv4\u30a2\u30c9\u30ec\u30b9\u5272\u308a\u5f53\u3066\u7528\u306eIPv6\u30c8\u30f3\u30cd\u30eb\u30a2\u30c9\u30ec\u30b9\u901a\u77e5 ] \r\nddns profile transix-update\r\n  url http:\/\/update.transix.jp\/request\r\n  query username=nnnnnnnn&password=abcdefghijk\r\n  transport ipv6\r\n  source-interface GigaEthernet2:3.0 \u3000<-- \u56fa\u5b9aIP\u63a5\u7d9a\u7528\u306eIF\u6307\u5b9a\r\n!\r\n\r\n ...\r\n\r\n[ VLAN104 \u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9  ]\r\ninterface GigaEthernet2:1.3\r\n  description Transix Fixed IPv4 via FG\r\n  encapsulation dot1q 104 tpid 8100\r\n  auto-connect\r\n  ip address 172.25.104.254\/24\r\n  ip policy route-map rtmap-fixed\r\n   no shutdown\r\n!\r\n ...\r\n\r\n[ Fortigate \u63a5\u7d9a\u7528\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9  ]\r\ninterface GigaEthernet2:3.0\r\n  description Fixed IPv4 Bridge\r\n  ip address 172.25.199.254\/24\r\n  ip policy route-map rtmap-vl199    <-- outbound\u901a\u4fe1\u3092Tunnel1.0 (BR)\u3078\u632f\u308a\u5411\u3051\r\n  ipv6 enable\r\n  ipv6 interface-identifier 00:00:00:00:00:00:fe:ed\r\n  ipv6 dhcp server dhcpv6pd-sv199\r\n  ipv6 nd ra enable\r\n  ipv6 nd ra other-config-flag\r\n  no shutdown\r\n!\r\n ...\r\n\r\n[ Transix \u56fa\u5b9aIPv4\u63a5\u7d9a\u7528\u30c8\u30f3\u30cd\u30eb ]\r\ninterface Tunnel1.0\r\n  description Interlink IPoE Fixed IP\r\n  tunnel mode 4-over-6\r\n  tunnel destination 2404:8e00::feed:141    <-- Transix BR Router Address\r\n  tunnel source GigaEthernet2:3.0\r\n  ip address 217.aaa.bbb.ccc\/32             <--  \u5272\u308a\u5f53\u3066\u3089\u308c\u305f\u56fa\u5b9aIPv4\u30a2\u30c9\u30ec\u30b9\r\n  ip tcp adjust-mss auto\r\n  ip nat enable\r\n  ip nat static 172.25.199.252  217.aaa.bbb.ccc  <-- FG50E-2 SSLVPN WAN 1 port\r\n  no shutdown\r\n!\r\n<\/code><\/pre>\r\n
\r\n
\r\n
VLAN104\u914d\u4e0b\u3067\u306f\u3053\u306e\u69cb\u6210\u3067\u306fNAPT\u3068NAT\u306e2\u91cd\u306e\u30a2\u30c9\u30ec\u30b9\u5909\u63db\u304c\u884c\u308f\u308c\u308b\u306e\u3067\uff0eIPSec\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u63a5\u7d9a\u306e\u3088\u3046\u306a\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306f\u4e0a\u624b\u304f\u6a5f\u80fd\u3057\u306a\u3044\u304b\u3082\u3057\u308c\u306a\u3044\uff0eFortigate\u3068IX2215\u306e\u53cc\u65b9\u3067\u4e0a\u624b\u304fNAT\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u304c\u6a5f\u80fd\u3057\u3066\u3044\u308c\u3070\u554f\u984c\u306a\u3044\u306e\u304b\u3082\u3057\u308c\u306a\u3044\u304c\u3001\u4eca\u56de\u306f\u307e\u3060\u691c\u8a3c\u3067\u304d\u3066\u3044\u306a\u3044\u306e\u3067\u3001\u4eca\u5f8c\u691c\u8a3c\u3057\u3066\u307f\u308b\u3053\u3068\u306b\u3059\u308b\uff0e<\/p>\r\n
\r\n
\u5b9f\u969b\u306b\u4e0a\u8a18\u306eNAT\u69cb\u6210\uff08Fortigate\u306f2\u53f7\u6a5f\u3067\u306f\u306a\u304f1\u53f7\u6a5f\u3092\u4f7f\u3063\u3066\u691c\u8a3c\u3057\u3066\u3044\u308b\uff09\u3067\u3001VLAN104\u914d\u4e0b\u306e\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304b\u3089\u5916\u90e8\u306e\u30b5\u30fc\u30d0(y2tech.net)\u306b\u5bfe\u3057\u3066 traceroute \u3057\u3066\u307f\u308b\u3068\u3001
\r\n
\r\n
\r\nyasuaki@MBAirM1 ~ % traceroute y2tech.net\r\ntraceroute to y2tech.net (35.79.232.139), 64 hops max, 52 byte packets\r\n 1  gw251.vl104.home.yoko (172.25.104.251)  6.118 ms  4.399 ms  4.265 ms\r\n 2  gw254.vl199.home.yoko (172.25.199.254)  4.264 ms  4.356 ms  4.106 ms\r\n 3  bek-bbrt10.transix.jp (14.0.9.125)  20.291 ms  9.267 ms  11.588 ms\r\n 4  210.173.176.198 (210.173.176.198)  10.347 ms  9.189 ms  10.081 ms\r\n 5  * * *\r\n    \u3010\u4ee5\u4e0b\u7701\u7565\u3011\r\n<\/code><\/pre>\r\n
\r\n\u78ba\u304b\u306b\u3001 Fortigate\uff08104.251) \u2192\u3000IX2215(199.254) \u2192 Transit BR \u3068\u3044\u3046\u60f3\u5b9a\u3057\u3066\u3044\u308b\u7d4c\u8def\u3067\u63a5\u7d9a\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u78ba\u8a8d\u3067\u304d\u308b\uff0e<\/p>\r\n
\r\n
\r\n
\r\n\"IPv6\r\n
\r\nIPv4\u306e\u307f\u306e\u63a5\u7d9a\u3068\u306a\u308b\u304c\u3001\u5272\u308a\u5f53\u3066\u3089\u308c\u305f\u56fa\u5b9aIP\u30a2\u30c9\u30ec\u30b9\u3067\u5916\u90e8\u63a5\u7d9a\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d<\/span>\r\n
\r\n
\r\n\"L2TP\r\n
\r\nVLAN104\u914d\u4e0b\u304b\u3089Mac OS\u306e\u6a19\u6e96L2TP\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3067\u5916\u90e8\u306eVPN\u30eb\u30fc\u30bf\u3068\u554f\u984c\u306a\u304f\u63a5\u7d9a\u3067\u304d\u3066\u3044\u308b<\/span>\r\n
\r\n<\/div>\r\n\r\n\r\n\r\n\r\n","protected":false},"excerpt":{"rendered":"\u5148\u65e5\u3001FLET’S\u5149(FTTH)\u3068NURO\u306e\u4e21\u65b9\u3092\u5c0e\u5165\u53ef\u80fd\u306a\u7269\u4ef6\u306b\u5f15\u3063\u8d8a\u3057\u3092\u3057\u3066\u3001\u4e21\u65b9\u306e\u5149\u30d5\u30a1\u30a4\u30d0\u7cfb\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u63a5\u7d9a\u30b5\u30fc\u30d3\u30b9\u304c\u4f7f\u3048\u308b\u72b6\u614b\u306b\u306a\u3063\u305f\u306e\u3067\u3001\u4e21\u65b9\u306e\u63a5\u7d9a\u30b5\u30fc\u30d3\u30b9\u306e\u901a\u4fe1\u54c1\u8cea\u72b6\u6cc1\u3092\u78ba\u8a8d\u3057\u3066\u307f\u308b\u3053\u3068\u306b\u3057\u305f\uff0e","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[7,836],"tags":[942,903,943,944],"class_list":["post-9334","post","type-post","status-publish","format-standard","hentry","category-inet","category-ipv6","tag-flets","tag-nuro","tag-943","tag-ip"],"_links":{"self":[{"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/posts\/9334","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/comments?post=9334"}],"version-history":[{"count":3,"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/posts\/9334\/revisions"}],"predecessor-version":[{"id":9468,"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/posts\/9334\/revisions\/9468"}],"wp:attachment":[{"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/media?parent=9334"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/categories?post=9334"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/tags?post=9334"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}