{"id":7791,"date":"2026-06-30T22:15:14","date_gmt":"2026-06-30T13:15:14","guid":{"rendered":"https:\/\/appbay.org\/?p=7791"},"modified":"2026-07-15T14:42:51","modified_gmt":"2026-07-15T05:42:51","slug":"rtx2ubuntu%e3%81%a7%e3%83%86%e3%82%b9%e3%83%88pppoe%e3%83%8d%e3%83%83%e3%83%88%e3%83%af%e3%83%bc%e3%82%af%e7%92%b0%e5%a2%83%e6%a7%8b%e7%af%89","status":"publish","type":"post","link":"https:\/\/appbay.org\/?p=7791","title":{"rendered":"RTX*2+Ubuntu\u3067\u30c6\u30b9\u30c8PPPoE\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u74b0\u5883\u69cb\u7bc9"},"content":{"rendered":"<h2><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-7800\" src=\"https:\/\/appbay.org\/wp-content\/uploads\/2026\/06\/7791-3.png\" alt=\"\" width=\"691\" height=\"551\" srcset=\"https:\/\/appbay.org\/wp-content\/uploads\/2026\/06\/7791-3.png 691w, https:\/\/appbay.org\/wp-content\/uploads\/2026\/06\/7791-3-300x239.png 300w\" sizes=\"auto, (max-width: 691px) 100vw, 691px\" \/><\/h2>\n<h2><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-7820\" src=\"https:\/\/appbay.org\/wp-content\/uploads\/2026\/06\/7791-4-1.jpg\" alt=\"\" width=\"479\" height=\"120\" srcset=\"https:\/\/appbay.org\/wp-content\/uploads\/2026\/06\/7791-4-1.jpg 479w, https:\/\/appbay.org\/wp-content\/uploads\/2026\/06\/7791-4-1-300x75.jpg 300w\" sizes=\"auto, (max-width: 479px) 100vw, 479px\" \/><\/h2>\n<h2>SSH<\/h2>\n<p>\u30fb\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/p>\n<p><span class=\"token token\">sudo<\/span> <span class=\"token token\">apt<\/span> update<br \/>\n<span class=\"token token\">sudo<\/span> <span class=\"token token\">apt<\/span> <span class=\"token token\">install<\/span> -y openssh-server<br \/>\n<span class=\"token token\">sudo<\/span> systemctl <span class=\"token token\">enable<\/span> &#8211;now <span class=\"token token\">ssh<br \/>\n<\/span><span class=\"token token\">sudo<\/span> systemctl status <span class=\"token token\">ssh<\/span><\/p>\n<p>\u30fbIP\u30a2\u30c9\u30ec\u30b9\u78ba\u8a8d<\/p>\n<p>ip a<\/p>\n<p>\u30fb\u63a5\u7d9a(\u63a5\u7d9a\u3059\u308b\u5074\u306ePC)<\/p>\n<p>ssh \u30e6\u30fc\u30b6\u30fc@ip\u30a2\u30c9\u30ec\u30b9<\/p>\n<p>\u30fb\u30b7\u30e3\u30c3\u30c8\u30c0\u30a6\u30f3<\/p>\n<p>sudo shutdown -h now<\/p>\n<p>\u30fb\u30c6\u30ad\u30b9\u30c8\u30d9\u30fc\u30b9\u8d77\u52d5\u306b\u3059\u308b\u5834\u5408<\/p>\n<p>sudo systemctl set-default multi-user.target<\/p>\n<p>\u203b\u623b\u3059\u5834\u5408<br \/>\nsudo systemctl set-default graphical.target<\/p>\n<h2>NIC\/VLAN<\/h2>\n<p>\u30fbNetworkManager<br \/>\n\u30c7\u30b9\u30af\u30c8\u30c3\u30d7\u7248\u30c7\u30d5\u30a9\u30eb\u30c8<br \/>\nnmcli\/nmtui(\u5bfe\u8a71)\u3067\u7ba1\u7406<\/p>\n<p>\u30fbsystemd-networkd<br \/>\n\u8efd\u91cf\u30c7\u30fc\u30e2\u30f3\u30d9\u30fc\u30b9<\/p>\n<p>\u4e21\u8005\u306fNetplan\u3067\u62bd\u8c61\u5316\u3055\u308c\u3066\u3044\u308b\u3002<br \/>\nNetplan\u306eYAML\u3067\u66f8\u304f\u3002<\/p>\n<p>\u30fb\u3069\u3061\u3089\u304c\u6709\u52b9\u304b<br \/>\nsystemctl is-active NetworkManager<br \/>\nsystemctl is-active systemd-networkd<\/p>\n<p>\u30fbNIC\u306e\u7269\u7406\u60c5\u5831\u53d6\u5f97<\/p>\n<p>\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30c7\u30d0\u30a4\u30b9\u4e00\u89a7<br \/>\nlshw -c network -short<\/p>\n<p>IP\u30a2\u30c9\u30ec\u30b9\u4e00\u89a7<br \/>\nip -br addr<\/p>\n<p>\u30fbVLAN\u8a2d\u5b9a(GUI)<\/p>\n<p>nm-connection-editor<br \/>\n(\u30b7\u30b9\u30c6\u30e0&gt;\u9ad8\u5ea6\u306a\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u8a2d\u5b9a)<br \/>\n\u3092\u8d77\u52d5\u3002<\/p>\n<p>VLAN\u3092\u8a2d\u5b9a\u3059\u308b\u4eee\u60f3LAN\u5074\u3092lab-trunk\u3068\u3057\u3066IPv4\/6\u3092\u7121\u52b9\u3002<br \/>\n\u65b0\u898f\u4f5c\u6210&gt;VLAN\u304b\u3089\u4f5c\u6210\u3057\u3001\u4ee5\u4e0b\u306e\u901a\u308a\u8a2d\u5b9aIPv4\/6\u306f\u7121\u52b9\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-7797\" src=\"https:\/\/appbay.org\/wp-content\/uploads\/2026\/06\/7791-1.jpg\" alt=\"\" width=\"545\" height=\"399\" srcset=\"https:\/\/appbay.org\/wp-content\/uploads\/2026\/06\/7791-1.jpg 545w, https:\/\/appbay.org\/wp-content\/uploads\/2026\/06\/7791-1-300x220.jpg 300w\" sizes=\"auto, (max-width: 545px) 100vw, 545px\" \/> <img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-7798\" src=\"https:\/\/appbay.org\/wp-content\/uploads\/2026\/06\/7791-2.jpg\" alt=\"\" width=\"547\" height=\"420\" srcset=\"https:\/\/appbay.org\/wp-content\/uploads\/2026\/06\/7791-2.jpg 697w, https:\/\/appbay.org\/wp-content\/uploads\/2026\/06\/7791-2-300x230.jpg 300w\" sizes=\"auto, (max-width: 547px) 100vw, 547px\" \/><\/p>\n<p>\u30fb\u78ba\u8a8d<\/p>\n<p class=\"p1\">nmcli -f NAME,DEVICE,AUTOCONNECT connection show | grep -E &#8216;enp0s31f6\\.(12|13)&#8217;<\/p>\n<p>\u30fbNetplan YAML\u78ba\u8a8d\u65b9\u6cd5<\/p>\n<p class=\"p1\"><span class=\"s1\">ls -la \/etc\/netplan<br \/>\n\u3053\u3053\u3067\u8aad\u307f\u53d6\u308c\u308b\u3053\u3068\u3002<br \/>\n01-network-manager-all.yaml<br \/>\n\u304c\u3042\u308b\u306e\u3067\u3001NetworkManager\u3092renderer\u306b\u4f7f\u3063\u3066\u3044\u308b\u3002<br \/>\n90-NM-*.yaml\u306fNetworkManager\u304c\u81ea\u52d5\u751f\u6210\u3057\u305f\u30d5\u30a1\u30a4\u30eb\u306a\u306e\u3067<br \/>\n\u624b\u52d5\u3067\u7de8\u96c6\u3057\u306a\u3044\u307b\u3046\u304c\u3044\u3044\u3002<br \/>\n<\/span><\/p>\n<p>\u30fbnmcli<\/p>\n<p>\u63a5\u7d9a\u78ba\u8a8d<br \/>\nnmcli connection show<br \/>\n<span class=\"s1\">nmcli connection show &#8216;\u6709\u7dda\u63a5\u7d9a 1&#8217; | grep ipv4<br \/>\n<\/span><\/p>\n<h2>IP\u30d5\u30a9\u30ef\u30fc\u30c7\u30a3\u30f3\u30b0<\/h2>\n<p>sudo sysctl -w net.ipv4.ip_forward=1<br \/>\n\u203b\u3053\u306e\u30de\u30b7\u30f3\u304c\u3001\u81ea\u5206\u5b9b\u3066\u3067\u306f\u306a\u3044IP\u30d1\u30b1\u30c3\u30c8\u3092\u53d7\u3051\u53d6\u3063\u305f\u3068\u304d\u306b\u3001\u5225\u306e\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3078\u8ee2\u9001\u3059\u308b\u304b\u3069\u3046\u304b\u3092\u6c7a\u3081\u308b\u30ab\u30fc\u30cd\u30eb\u30d1\u30e9\u30e1\u30fc\u30bf<\/p>\n<p>\u30fb\u6c38\u7d9a\u5316\u3059\u308b\u5834\u5408<br \/>\necho &#8216;net.ipv4.ip_forward=1&#8217; | sudo tee \/etc\/sysctl.d\/99-lab.conf<\/p>\n<h2>PPPoE\u30b5\u30fc\u30d0\u30fc\u5316<\/h2>\n<p>\u30fb\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<br \/>\nsudo apt update<br \/>\nsudo apt install -y pppoe ppp<\/p>\n<p>\u30fb\u30b5\u30fc\u30d0\u30fc\u30aa\u30d7\u30b7\u30e7\u30f3<br \/>\nsudo vim \/etc\/ppp\/pppoe-server-options<\/p>\n<pre class=\"lang:default decode:true\"># \u30e9\u30dc\u7528 pppoe-server \u30aa\u30d7\u30b7\u30e7\u30f3\r\nrequire-chap\r\nnodefaultroute\r\nnoproxyarp\r\nlcp-echo-interval 10\r\nlcp-echo-failure 3\r\nmru 1454\r\nmtu 1454<\/pre>\n<p data-pm-slice=\"0 0 []\">require-chap<br \/>\n\u63a5\u7d9a\u3057\u3066\u304f\u308b\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306b\u5bfe\u3057\u3066\u3001CHAP\u8a8d\u8a3c\u3092\u5fc5\u9808\u306b\u3059\u308b\u3002\u30b5\u30fc\u30d0\u30fc\u304c\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3092\u8a8d\u8a3c\u3059\u308b\u969b\u306e\u65b9\u5f0f\u6307\u5b9a\u3002<\/p>\n<p>nodefaultroute<br \/>\n\u30b5\u30fc\u30d0\u306e\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u30c6\u30fc\u30d6\u30eb\u306b\u30c7\u30d5\u30a9\u30eb\u30c8\u30eb\u30fc\u30c8\u3092\u8ffd\u52a0\u3055\u305b\u306a\u3044\u3002<\/p>\n<p>noproxyarp<br \/>\n\u30d7\u30ed\u30ad\u30b7ARP\u30a8\u30f3\u30c8\u30ea\u3092\u8ffd\u52a0\u3055\u305b\u306a\u3044\u3002<\/p>\n<p>lcp-echo-interval 10 \/ lcp-echo-failure 3<br \/>\n\u5404\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u63a5\u7d9a\u306b\u5bfe\u3057\u306610\u79d2\u3054\u3068\u306b\u751f\u5b58\u78ba\u8a8d\u3092\u9001\u308a\u30013\u56de\u5931\u6557\uff08\u7d0430\u79d2\u7121\u5fdc\u7b54\uff09\u3067\u305d\u306e\u63a5\u7d9a\u3092\u5207\u65ad\u3059\u308b\u3002\u5207\u308c\u305f\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e\u30bb\u30c3\u30b7\u30e7\u30f3\u3092\u6383\u9664\u3059\u308b\u305f\u3081\u306e\u8a2d\u5b9a\u3002<\/p>\n<p>mru 1454 \/ mtu 1454<br \/>\n\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3068\u306e\u901a\u4fe1\u3067\u4f7f\u3046\u30d1\u30b1\u30c3\u30c8\u30b5\u30a4\u30ba\u30921454\u306b\u6307\u5b9a\u3002<\/p>\n<p>\u30fb\u8a8d\u8a3c\u8a2d\u5b9a<br \/>\nsudo vim \/etc\/ppp\/chap-secrets<\/p>\n<pre class=\"lang:default decode:true\"># client server secret IP\r\n\"rtx-a\" * \"labpass\" 203.0.113.2\r\n\"rtx-b\" * \"labpass\" 198.51.100.2<\/pre>\n<p>\u30fb\u624b\u52d5\u8d77\u52d5\u306e\u5834\u5408<br \/>\nsudo pppoe-server -I enp0s31f6.13 -L 100.64.0.1 -R 203.0.113.2 -N 1 -C isp-a<\/p>\n<p>-I enp0s31f6.13(\u5f85\u3061\u53d7\u3051\u308b\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9)<br \/>\n-L 100.64.0.1(\u30b5\u30fc\u30d0\u30fc\u30a2\u30c9\u30ec\u30b9)<br \/>\n-R 203.0.113.2(\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30a2\u30c9\u30ec\u30b9)<br \/>\n-N 1(\u540c\u6642\u6700\u5927\u30bb\u30c3\u30b7\u30e7\u30f3)<br \/>\n-C isp-a(\u30b5\u30fc\u30d0\u30fc\u8b58\u5225\u540d)<\/p>\n<p>\u30fbPPPoE\u30b5\u30fc\u30d0\u30fc\u8d77\u52d5\u78ba\u8a8d<br \/>\npgrep -a pppoe-server<\/p>\n<h2>PPPoE\u30b5\u30fc\u30d0\u30fc\u6c38\u7d9a\u5316<\/h2>\n<p>sudo vim \/etc\/systemd\/system\/pppoe-server@.service<\/p>\n<pre class=\"lang:default decode:true \">[Unit]\r\nDescription=PPPoE server (%i)\r\nAfter=network-online.target NetworkManager-wait-online.service\r\nWants=network-online.target\r\n\r\n[Service]\r\nType=forking\r\nEnvironmentFile=\/etc\/pppoe-lab\/%i.conf\r\n# VLAN I\/F \u304c\u73fe\u308c\u308b\u307e\u3067\u5f85\u3063\u3066\u304b\u3089\u8d77\u52d5\uff08GUI\u8d77\u52d5\u306e\u30bf\u30a4\u30df\u30f3\u30b0\u305a\u308c\u5bfe\u7b56\uff09\r\nExecStartPre=\/bin\/sh -c 'until ip link show ${IFACE} &gt;\/dev\/null 2&gt;&amp;1; do sleep 1; done'\r\nExecStart=\/usr\/sbin\/pppoe-server -I ${IFACE} -L ${LOCAL} -R ${REMOTE} -N ${SESSIONS} -C ${ACNAME}\r\nRestart=on-failure\r\nRestartSec=3\r\n\r\n[Install]\r\nWantedBy=multi-user.target<\/pre>\n<p>sudo mkdir -p \/etc\/pppoe-lab<br \/>\nsudo vim \/etc\/pppoe-lab\/isp-a.conf<\/p>\n<pre class=\"lang:default decode:true \">IFACE=enp0s31f6.13\r\nLOCAL=100.64.0.1\r\nREMOTE=203.0.113.2\r\nSESSIONS=1\r\nACNAME=isp-a\r\n<\/pre>\n<p>sudo vim \/etc\/pppoe-lab\/isp-b.conf<\/p>\n<pre class=\"lang:default decode:true\">IFACE=enp0s31f6.12\r\nLOCAL=100.64.0.2\r\nREMOTE=198.51.100.2\r\nSESSIONS=1\r\nACNAME=isp-b<\/pre>\n<p class=\"p1\">sudo systemctl daemon-reload<br \/>\nsudo systemctl enable &#8211;now pppoe-server@isp-a.service<br \/>\nsudo systemctl enable &#8211;now pppoe-server@isp-b.service<\/p>\n<h2>PPPoE\u30ea\u30a2\u30eb\u30bf\u30a4\u30e0\u78ba\u8a8d<\/h2>\n<p class=\"p1\"><span class=\"s1\">sudo journalctl -f | grep -Ei &#8216;pppd|pppoe&#8217;<br \/>\nsudo tcpdump -ni enp0s31f6 -e<br \/>\n<\/span><span class=\"s1\">sudo tcpdump -ni enp0s31f6.13 -e pppoed<\/span><\/p>\n<h2>WAN\u5074NIC\u306bNAT<\/h2>\n<p>\u30fb\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u4e00\u89a7<br \/>\nip -br addr<\/p>\n<p>\u30fb\u51fa\u53e3(Realtek)\u3067\u30de\u30b9\u30ab\u30ec\u30fc\u30c9<\/p>\n<p>sudo iptables -t nat -A POSTROUTING -o enp2s0 -j MASQUERADE<\/p>\n<p>sudo iptables -A FORWARD -i ppp+ -o enp2s0 -j ACCEPT<\/p>\n<p>sudo iptables -A FORWARD -i enp2s0 -o ppp+ -m conntrack &#8211;ctstate ESTABLISHED,RELATED -j ACCEPT<\/p>\n<p>sudo iptables -t mangle -A FORWARD -p tcp &#8211;tcp-flags SYN,RST SYN -j TCPMSS &#8211;clamp-mss-to-pmtu<\/p>\n<p>\u30fb\u6c38\u7d9a\u5316<br \/>\nsudo apt install -y iptables-persistent<br \/>\nsudo netfilter-persistent save<\/p>\n<p><del>\u30fb\u623b\u308b\u30eb\u30fc\u30c8<\/del><br \/>\n<del>sudo ip route add 192.168.13.0\/24 dev ppp1<\/del><br \/>\n<del>sudo ip route add 192.168.12.0\/24 dev ppp0<\/del><\/p>\n<p><del>\u30fb\u6c38\u7d9a\u5316<\/del><br \/>\n<del>sudo vim \/etc\/ppp\/ip-up.d\/lab-routes<\/del><\/p>\n<pre class=\"lang:default decode:true\"><del>#!\/bin\/sh\r\ncase \"$PPP_REMOTE\" in\r\n  203.0.113.2)  ip route add 192.168.13.0\/24 dev \"$PPP_IFACE\" ;;\r\n  198.51.100.2) ip route add 192.168.12.0\/24 dev \"$PPP_IFACE\" ;;\r\nesac<\/del><\/pre>\n<p><del>sudo chmod +x \/etc\/ppp\/ip-up.d\/lab-routes<\/del><\/p>\n<h2>DNS<\/h2>\n<p>\u30fbUbuntu<\/p>\n<p>printf &#8216;ms-dns 8.8.8.8\\nms-dns 1.1.1.1\\n&#8217; | sudo tee -a \/etc\/ppp\/pppoe-server-options<br \/>\nsudo systemctl restart pppoe-server@isp-a pppoe-server@isp-b<\/p>\n<h2>RTX\u62e0\u70b9\u9593VPN(GUI)<\/h2>\n<p>\u30c0\u30c3\u30b7\u30e5\u30dc\u30fc\u30c9&gt;\u304b\u3093\u305f\u3093\u8a2d\u5b9a&gt;IPsec<br \/>\n\u30fb\u81ea\u5206\u5074\u3068\u63a5\u7d9a\u5148\u306e\u4e21\u65b9\u3068\u3082\u56fa\u5b9a\u306e &#8230; \u6301\u3063\u3066\u3044\u308b<br \/>\n\u30fb\u63a5\u7d9a\u5148\u306e\u30db\u30b9\u30c8\u540d\u307e\u305f\u306fIP\u30a2\u30c9\u30ec\u30b9\uff1a\u76f8\u624b\u5074\u306eIP\u30a2\u30c9\u30ec\u30b9<br \/>\n\u30fb\u8a8d\u8a3c\u9375\uff1aabc (\u672c\u756a\u3067\u306f\u8907\u96d1\u306b\u3059\u308b)<br \/>\n\u30fb\u8a8d\u8a3c\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\uff1aHMAC-SHA<br \/>\n\u30fb\u6697\u53f7\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\uff1a3DES-CBC<\/p>\n<p>\u4e0b\u306b\u3044\u304f\u307b\u3069\u5f37\u3044\u3002\u9078\u3076\u3068\u304d\u306f\u6697\u53f7\u3068\u8a8d\u8a3c\u3092\u540c\u3058\u30be\u30fc\u30f3\u3067\u63c3\u3048\u308b\u3053\u3068\u304c\u591a\u3044\u3002<br \/>\nHMAC-SHA256\u306a\u3089AES(AES256)-CBC\u3001HMAC-SHA\u306a\u30893DES-CBC\u3002<br \/>\n\u76f8\u624b\u62e0\u70b9\u306b\u627f\u8a8d\u3001\u6697\u53f7\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u4e21\u65b9\u5408\u308f\u305b\u308b\u3002<\/p>\n<h3>\u6697\u53f7\u3001\u627f\u8a8d\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0<\/h3>\n<p>\u30fb\u627f\u8a8d\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0<br \/>\n\u2715\u3000HMAC-MD5<br \/>\n\u25b3\u3000HMAC-SHA<br \/>\n\u25ef\u3000HMAC-SHA256<\/p>\n<p>\u30fb\u6697\u53f7\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0<br \/>\n\u2715\u3000DES-CBC<br \/>\n\u25b3\u30003DES-CBC<br \/>\n\u25ef\u3000AES-CBC<br \/>\n\u25ef\u3000AES256-CBC<\/p>\n<h3>IKE\u3001ESP\u3001SA<\/h3>\n<p>IPsec\u306e\u69cb\u6210\u306fIKE+ESP+SA<\/p>\n<p>1.IKE\u304c\u30cf\u30f3\u30c9\u30b7\u30a7\u30a4\u30af(PSK\u8a8d\u8a3c)<br \/>\nIKE SA\u4f5c\u6210<br \/>\nIKE SA\u306e\u4e2d\u3067\u3001ESP SA\u4f5c\u6210<br \/>\n\u203bPSK\u8a8d\u8a3c\u306f\u4e8b\u524d\u5171\u6709\u30ad\u30fc\u3092\u9001\u4fe1\u3057\u306a\u3044\u30cf\u30c3\u30b7\u30e5\u3092\u7167\u5408<br \/>\n\u203b\u4e8b\u524d\u5171\u6709\u30ad\u30fc=Pre-Shared Key<\/p>\n<p>2.ESP SA\u3092\u4f7f\u3044\u3001ESP\u30d1\u30b1\u30c3\u30c8\u751f\u6210<br \/>\n\u203bESP\u30d5\u30a9\u30fc\u30de\u30c3\u30c8\u306eIP\u30d1\u30b1\u30c3\u30c8<br \/>\n\u203b\u6697\u53f7\u3001\u8a8d\u8a3c\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u306f\u3053\u3053\u306b\u52b9\u304f<\/p>\n<p>3.ESP\u30d1\u30b1\u30c3\u30c8\u3092\u8ee2\u9001(\u8ee2\u9001\u306f\u5b9f\u88c5)<\/p>\n<p>\u203bIKE\u3001ESP\u3001SA\u3053\u3053\u307e\u3067<\/p>\n<p>\u7d4c\u8def\u306b\u95a2\u3059\u308b\u8a2d\u5b9a&gt;\u63a5\u7d9a\u5148\u306eLAN\u5074\u30a2\u30c9\u30ec\u30b9\uff1a192.168.12.0<br \/>\n\u3053\u3053\u306fip route 192.168.12.0\/24 gateway tunnel N\u306e\u8a2d\u5b9a\u306b\u76f8\u5f53\u3059\u308b\u3002<\/p>\n<p>\u62e0\u70b9\u9593VPN\u306fGUI\u3060\u3051\u3067\u306f\u30a8\u30e9\u30fc\u306b\u306a\u3063\u3066\u3057\u307e\u3063\u305f\u306e\u3067\u30b3\u30de\u30f3\u30c9\u3067\u8ffd\u52a0\u8a2d\u5b9a\u3002<br \/>\n\u6700\u7d42\u7684\u306a\u30b3\u30f3\u30d5\u30a3\u30b0<\/p>\n<pre class=\"lang:default decode:true \">console character en.ascii\r\nconsole lines infinity\r\n\r\nip route default gateway pp 1\r\nip lan1 address 192.168.13.1\/24\r\n#ip lan1 address 192.168.12.1\/24\r\n\r\nnat descriptor type 1 masquerade\r\nnat descriptor address outer 1 ipcp\r\nnat descriptor address inner 1 auto\r\n\r\nnat descriptor masquerade static 1 1 192.168.13.1 udp 500\r\nnat descriptor masquerade static 1 2 192.168.13.1 esp\r\nnat descriptor masquerade static 1 3 192.168.13.1 udp 4500\r\n#nat descriptor masquerade static 1 1 192.168.12.1 udp 500\r\n#nat descriptor masquerade static 1 2 192.168.12.1 esp\r\n#nat descriptor masquerade static 1 3 192.168.12.1 udp 4500\r\n\r\npp select 1\r\n\r\n pppoe use lan2\r\n\r\n pp always-on on\r\n pp auth accept chap\r\n pp auth myname rtx-a labpass\r\n #pp auth myname rtx-b labpass\r\n\r\n ppp lcp mru on 1454\r\n ppp ipcp ipaddress on\r\n ppp ipcp msext on\r\n\r\n ip pp nat descriptor 1\r\n ip pp mtu 1454\r\n ip pp tcp mss limit auto\r\n\r\npp enable 1\r\n\r\nip route 192.168.12.0\/24 gateway tunnel 1\r\n#ip route 192.168.13.0\/24 gateway tunnel 1\r\n\r\ntunnel select 1\r\n\r\n description tunnel test\r\n\r\n ipsec tunnel 1\r\n ipsec sa policy 1 1 esp 3des-cbc sha-hmac\r\n ipsec ike nat-traversal 1 on\r\n ipsec ike keepalive log 1 off\r\n ipsec ike keepalive use 1 on heartbeat 10 6\r\n ipsec ike pre-shared-key 1 text abc\r\n ipsec ike local address 1 192.168.13.1\r\n ipsec ike remote address 1 198.51.100.2\r\n #ipsec ike local address 1 192.168.12.1\r\n #ipsec ike remote address 1 203.0.113.2\r\n\r\n ip tunnel tcp mss limit auto\r\n\r\ntunnel enable 1\r\n\r\nipsec auto refresh on\r\n\r\ndhcp service server\r\ndhcp scope 1 192.168.13.2-192.168.13.254\/24\r\n#dhcp scope 1 192.168.12.2-192.168.12.254\/24\r\n\r\ndns server pp 1\r\n\r\nhttpd host 192.168.0.0-192.168.255.255\r\nsshd service on\r\nsshd host key generate\r\nsshd host 192.168.0.0-192.168.255.255<\/pre>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>SSH \u30fb\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb sudo apt update sudo apt install -y openssh-server sudo systemctl enable &#8211;now ssh sudo syste &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/appbay.org\/?p=7791\" class=\"more-link\"><span class=\"screen-reader-text\">&#8220;RTX*2+Ubuntu\u3067\u30c6\u30b9\u30c8PPPoE\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u74b0\u5883\u69cb\u7bc9&#8221; \u306e<\/span>\u7d9a\u304d\u3092\u8aad\u3080<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-7791","post","type-post","status-publish","format-standard","hentry","category-1"],"_links":{"self":[{"href":"https:\/\/appbay.org\/index.php?rest_route=\/wp\/v2\/posts\/7791","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/appbay.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/appbay.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/appbay.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/appbay.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7791"}],"version-history":[{"count":29,"href":"https:\/\/appbay.org\/index.php?rest_route=\/wp\/v2\/posts\/7791\/revisions"}],"predecessor-version":[{"id":7855,"href":"https:\/\/appbay.org\/index.php?rest_route=\/wp\/v2\/posts\/7791\/revisions\/7855"}],"wp:attachment":[{"href":"https:\/\/appbay.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7791"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/appbay.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7791"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/appbay.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7791"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}