Microsoft Azure Virtual NetworkとVPN接続する｜クラウド接続の設定｜設定例｜ルータ・ネットワーク機器

Microsoft Azure Virtual NetworkとVPN接続するための設定例です。

Microsoft Azure Virtual Networkでは、Microsoft Azure内のプライベートで孤立したセクションを作成することができます。詳細は下記Webサイトをご参照ください。

補足・注意点

FITELnetの設定例は下記をご参照ください。

設定例	設定例（txt）
Microsoft AzureとVPN接続する	この設定のご利用は

<pre>
access-list 100 permit udp host ##VPN-PublicIP## eq 500 any eq 500
access-list 100 permit 50 host ##VPN-PublicIP## any
access-list 111 deny ip any any
access-list 121 spi ip any any
!
ip route 0.0.0.0 0.0.0.0 tunnel 3
ip route 10.0.0.0 255.255.0.0 tunnel 1
ip nat list 1 any
!
crypto ipsec policy IPSECPOL_001
 set security-association always-up
 set security-association rekey always
 set security-association lifetime seconds 3600
 set security-association transform-keysize aes 256 256 256
 set security-association transform esp-aes esp-sha256-hmac
 set mtu 1454
exit
!
crypto ipsec selector SELECTOR_1
 src 1 ipv4 any
 dst 1 ipv4 any
exit
!
crypto isakmp log sa
crypto isakmp log session
crypto isakmp log negotiation-fail
crypto isakmp negotiation retry timer 10 limit 3 timer-max 30 guard-time 0
crypto isakmp negotiation always-up-params interval 1000 max-initiate 10 max-pending 10 delay 1
!
crypto isakmp policy ISAPOL_001
 authentication pre-share
 encryption aes
 encryption-keysize aes 256 256 256
 group 2
 lifetime 28800
 hash sha-256
 initiate-mode main
exit
!
crypto isakmp profile ISAPROF_001
 match identity address ##VPN-PublicIP##
 keepalive interval 10
 set isakmp-policy ISAPOL_001
 set ipsec-policy IPSECPOL_001
 set peer ##VPN-PublicIP##
 ike-version 1
 local-key ascii ##Pre-Shared_Key##
exit
!
crypto map MAP1 ipsec-isakmp
 match address SELECTOR_1
 set isakmp-profile ISAPROF_001
exit
!
logging buffer level informational
!
aaa authentication login default local
aaa authorization exec default local
!
username test privilege 15 password 2 $1$LAruCQ4A$T3O69MOhXaiNub6xoHNsG1
!
hostname FITELnet
!
interface GigaEthernet 1/1
 vlan-id 1
 bridge-group 1
 channel-group 1
exit
!
interface GigaEthernet 2/1
 vlan-id 2
 bridge-group 2
 pppoe enable
exit
!
interface Port-channel 1
 ip address 192.168.1.1 255.255.255.0
 mss 1350
exit
!
interface Tunnel 1
 tunnel mode ipsec map MAP1
 link-state sync-sa
exit
!
interface Tunnel 3
 ip address ##furukawa-GW## 255.255.255.255
 ip access-group 100 in
 ip access-group 111 in
 ip access-group 121 out
 ip nat inside source list 1 interface
 tunnel mode pppoe profile PPPOE_PROF0001
 pppoe interface gigaethernet 2/1
exit
!
pppoe profile PPPOE_PROF0001
 account user@xxxx.ne.jp secret
exit
!
end
</pre>

ページの先頭へ

Microsoft Azure Virtual NetworkとVPN接続する対象装置：F70/F71/F220/F221/F220 EX/F221 EX

補足・注意点