「クロスパス」を利用する｜IPoEの設定｜設定例｜ルータ・ネットワーク機器

アルテリア・ネットワークス社の「クロスパス」を利用する場合の設定例です。

「クロスパス」については、下記URLをご参照ください。

ブロードバンドアクセス「クロスパス」（アルテリア・ネットワークス社サイト）

本設定例では、「クロスパス」に対応した次の機能を利用します。

IPinIP機能の宛先アドレスFQDN指定対応（可変IPにて使用）
ダイナミックDNSクライアント機能のHTTPS通信対応（固定IP1、固定IP8/IP16にて使用）

上記いずれも、F70/F71はV01.03より、F220/F221はV01.05より、それぞれサポートしています。

補足・注意点

以下表の設定例のPDFファイルをご確認ください。補足欄にコマンドの補足説明や注意点を記載しております。

	設定例	HGW/ひかり電話（下構成図参照）
可変IP (DS-Lite)	RA-Proxyを利用この設定のご利用は	（構成1）HGWあり/ひかり電話あり
		（構成1）HGWあり/ひかり電話なし
		（構成2）HGWなし/ひかり電話なし
	DHCPv6-PDを利用この設定のご利用は	（構成3）HGWあり/ひかり電話あり
	DHCPv6-PDを利用この設定のご利用は	（構成4）HGWなし/ひかり電話あり
固定IP1	RA-Proxyを利用この設定のご利用は	（構成1）HGWあり/ひかり電話あり
		（構成1）HGWあり/ひかり電話なし
		（構成2）HGWなし/ひかり電話なし
	DHCPv6-PDを利用この設定のご利用は	（構成4）HGWなし/ひかり電話あり
固定 IP8/IP16	RA-Proxyを利用この設定のご利用は	（構成1）HGWあり/ひかり電話あり
		（構成1）HGWあり/ひかり電話なし
		（構成2）HGWなし/ひかり電話なし
	DHCPv6-PDを利用この設定のご利用は	（構成4）HGWなし/ひかり電話あり

<pre>
access-list 109 deny ip any any
access-list 110 spi ip any any
access-list 4000 permit icmp6 any any neighbor-advertisement
access-list 4000 permit icmp6 any any neighbor-solicitation
access-list 4000 permit icmp6 any any router-advertisement
access-list 4000 permit udp any any eq 546
access-list 4009 deny ipv6 any any
access-list 4010 spi ipv6 any any
access-list 4100 permit tcp any any eq 53
access-list 4100 permit udp any any eq 53
access-list 4101 permit tcp any ::1/128
access-list 4101 permit udp any ::1/128
!
ip route 0.0.0.0 0.0.0.0 tunnel 1
ip name-server ::1
!
ip dhcp server-profile LAN
 address 192.168.0.2 192.168.0.254
 lease-time 28800
 dns 192.168.0.1
 gateway 192.168.0.1
exit
!
ipv6 dhcp client-profile NGN
 option-request dns-server
 retries infinity
exit
!
ipv6 dhcp server-profile LANv6
 dns port-channel 1
exit
!
ipinip tunnel-profile IPIP1
 profile-mode ipip
 source ipv6 port-channel 11
 destination ipv6 fqdn ##トンネル終端装置 FQDN##
 ipinip fragment pre
exit
!
logging buffer level informational
!
aaa authentication login default local
aaa authorization exec default local
!
username test privilege 15 password 2 $1$LAruCQ4A$T3O69MOhXaiNub6xoHNsG1
!
hostname FITELnet
!
interface GigaEthernet 1/1
 vlan-id 11
 bridge-group 11
 channel-group 11
 policy-route input DNS-POLICY
exit
!
interface GigaEthernet 2/1
 vlan-id 1
 bridge-group 1
 channel-group 1
 ipv6 access-group 4000 in
 ipv6 access-group 4009 in
 ipv6 access-group 4010 out
exit
!
interface Port-channel 1
 ipv6 enable
 ipv6 nd receive-ra prefix-delegation port-channel 11
 ipv6 router-lifetime-receive-enable
 ipv6 trust-ra-prefix-lifetime
 ipv6 dhcp service client
 ipv6 dhcp client-profile NGN
exit
!
interface Port-channel 11
 ip dhcp service server
 ip dhcp server-profile LAN
 ip address 192.168.0.1 255.255.255.0
 ipv6 enable
 ipv6 address autoconfig
 ipv6 nd other-config-flag
 ipv6 nd send-ra
 ipv6 trust-ra-prefix-lifetime
 ipv6 dhcp service server
 ipv6 dhcp server-profile LANv6
 mss 1420
 link-state always-up
exit
!
interface Tunnel 1
 ip access-group 109 in
 ip access-group 110 out
 tunnel mode ipinip tunnel-profile IPIP1
exit
!
line console
 exec-timeout 0
 authorization exec default local
exit
!
line telnet
 exec-timeout 0
exit
!
class-map DNS6
 match ipv6 access-group 4100
exit
!
class-map DNS6_LO
 match ipv6 access-group 4101
exit
!
policy-route-map DNS-POLICY
 !
 class DNS6
  search-sequence 10
  count
  action nexthop 2001:db8::1
 exit
 !
 class DNS6_LO
  search-sequence 1
  count
  action transmit
 exit
 !
exit
!
local policy-route DNS-POLICY
!
dns-server ip enable
dns-server ipv6 enable
!
proxydns domain 1 any * any dhcp ipv6 port-channel 1 source-interface port-channel 11
proxydns address 1 any dhcp ipv6 port-channel 1 source-interface port-channel 11
!
end
</pre>

<pre>
access-list 109 deny ip any any
access-list 110 spi ip any any
access-list 4000 permit icmp6 any any neighbor-advertisement
access-list 4000 permit icmp6 any any neighbor-solicitation
access-list 4000 permit icmp6 any any router-advertisement
access-list 4000 permit udp any any eq 546
access-list 4009 deny ipv6 any any
access-list 4010 spi ipv6 any any
access-list 4100 permit tcp any any eq 53
access-list 4100 permit udp any any eq 53
access-list 4101 permit tcp any ::1/128
access-list 4101 permit udp any ::1/128
!
ip route 0.0.0.0 0.0.0.0 tunnel 1
ip name-server ::1
!
ip dhcp server-profile LAN
 address 192.168.0.2 192.168.0.254
 lease-time 28800
 dns 192.168.0.1
 gateway 192.168.0.1
exit
!
ip nat list 1 192.168.0.0 0.0.0.255
!
ipv6 dhcp client-profile NGN
 option-request dns-server
 retries infinity
exit
!
ipv6 dhcp server-profile LANv6
 dns port-channel 1
exit
!
ipinip tunnel-profile IPIP1
 profile-mode ipip
 source ipv6 port-channel 11
 destination address ##トンネル終端装置 IPv6アドレス##
 ipinip fragment pre
exit
!
logging buffer level informational
!
aaa authentication login default local
aaa authorization exec default local
!
username test privilege 15 password 2 $1$LAruCQ4A$T3O69MOhXaiNub6xoHNsG1
!
hostname FITELnet
!
interface GigaEthernet 1/1
 vlan-id 11
 bridge-group 11
 channel-group 11
 policy-route input DNS-POLICY
exit
!
interface GigaEthernet 2/1
 vlan-id 1
 bridge-group 1
 channel-group 1
 ipv6 access-group 4000 in
 ipv6 access-group 4009 in
 ipv6 access-group 4010 out
exit
!
interface Port-channel 1
 ipv6 enable
 ipv6 nd receive-ra prefix-delegation port-channel 11
 ipv6 router-lifetime-receive-enable
 ipv6 trust-ra-prefix-lifetime
 ipv6 dhcp service client
 ipv6 dhcp client-profile NGN
exit
!
interface Port-channel 11
 ip dhcp service server
 ip dhcp server-profile LAN
 ip address 192.168.0.1 255.255.255.0
 ipv6 enable
 ipv6 address autoconfig
 ipv6 nd other-config-flag
 ipv6 nd send-ra
 ipv6 trust-ra-prefix-lifetime
 ipv6 dhcp service server
 ipv6 dhcp server-profile LANv6
 mss 1420
 link-state always-up
 ddns-client address ipv6 action http-client 1 delay 10 interval 600
exit
!
interface Tunnel 1
 ip address ##固定IPv4グローバルアドレス## 255.255.255.255
 ip access-group 109 in
 ip access-group 110 out
 ip nat inside source list 1 interface
 tunnel mode ipinip tunnel-profile IPIP1
exit
!
class-map DNS6
 match ipv6 access-group 4100
exit
!
class-map DNS6_LO
 match ipv6 access-group 4101
exit
!
policy-route-map DNS-POLICY
 !
 class DNS6
  search-sequence 10
  count
  action nexthop 2001:db8::1
 exit
 !
 class DNS6_LO
  search-sequence 1
  count
  action transmit
 exit
 !
exit
!
local policy-route DNS-POLICY
!
line console
 exec-timeout 0
 authorization exec default local
exit
!
line telnet
 exec-timeout 0
exit
!
dns-server ip enable
dns-server ipv6 enable
!
proxydns domain 1 any * any dhcp ipv6 port-channel 1 source-interface port-channel 11
proxydns address 1 any dhcp ipv6 port-channel 1 source-interface port-channel 11
!
http-client 1
 request-timeout 10 retry 5
 method 1 get url https://##Basic認証ID##:##Basic認証パスワード##@##アップデートサーバURL## d ##FQDN## p ##DDNSパスワード## u ##DDNS_ID## a $i6
 reference-interface port-channel 11
 source-interface port-channel 11
 logging on
exit
!
end
</pre>

<pre>
access-list 109 deny ip any any
access-list 110 spi ip any any
access-list 4000 permit icmp6 any any neighbor-advertisement
access-list 4000 permit icmp6 any any neighbor-solicitation
access-list 4000 permit icmp6 any any router-advertisement
access-list 4000 permit udp any any eq 546
access-list 4009 deny ipv6 any any
access-list 4010 spi ipv6 any any
!
ip route 0.0.0.0 0.0.0.0 tunnel 1
ip name-server ::1
!
ip dhcp server-profile LAN
 address 192.168.0.2 192.168.0.254
 lease-time 28800
 dns 192.168.0.1
 gateway 192.168.0.1
exit
!
ip nat list 1 192.168.0.0 0.0.0.255
!
ipv6 route ::/0 dhcp port-channel 1
!
ipv6 dhcp client-profile NGN
 option-request prefix-delegation
 option-request dns-server
 retries infinity
exit
!
ipv6 dhcp server-profile LANv6
 dns port-channel 1
exit
!
ipinip tunnel-profile IPIP1
 profile-mode ipip
 source ipv6 port-channel 11
 destination address ##トンネル終端装置 IPv6アドレス##
 ipinip fragment pre
exit
!
logging buffer level informational
!
aaa authentication login default local
aaa authorization exec default local
!
username test privilege 15 password 2 $1$LAruCQ4A$T3O69MOhXaiNub6xoHNsG1
!
hostname FITELnet
!
interface GigaEthernet 1/1
 vlan-id 11
 bridge-group 11
 channel-group 11
exit
!
interface GigaEthernet 2/1
 vlan-id 1
 bridge-group 1
 channel-group 1
 ipv6 access-group 4000 in
 ipv6 access-group 4009 in
 ipv6 access-group 4010 out
exit
!
interface Port-channel 1
 ipv6 enable
 ipv6 dhcp service client
 ipv6 dhcp client-profile NGN
exit
!
interface Port-channel 11
 ip dhcp service server
 ip dhcp server-profile LAN
 ip address 192.168.0.1 255.255.255.0
 ipv6 enable
 ipv6 address dhcp port-channel 1 ##インタフェースID##/64
 ipv6 nd other-config-flag
 ipv6 nd send-ra
 ipv6 trust-ra-prefix-lifetime
 ipv6 dhcp service server
 ipv6 dhcp server-profile LANv6
 mss 1420
 link-state always-up
 ddns-client address ipv6 action http-client 1 delay 10 interval 600
exit
!
interface Tunnel 1
 ip address ##固定IPv4グローバルアドレス## 255.255.255.255
 ip access-group 109 in
 ip access-group 110 out
 ip nat inside source list 1 interface
 tunnel mode ipinip tunnel-profile IPIP1
exit
!
line console
 exec-timeout 0
 authorization exec default local
exit
!
line telnet
 exec-timeout 0
exit
!
dns-server ip enable
dns-server ipv6 enable
!
proxydns domain 1 any * any dhcp ipv6 port-channel 1 source-interface port-channel 11
proxydns address 1 any dhcp ipv6 port-channel 1 source-interface port-channel 11
!
http-client 1
 request-timeout 10 retry 5
 method 1 get url https://##Basic認証ID##:##Basic認証パスワード##@##アップデートサーバURL## d ##FQDN## p ##DDNSパスワード## u ##DDNS_ID## a $i6
 reference-interface port-channel 11
 source-interface port-channel 11
 logging on
exit
!
end
</pre>

<pre>
access-list 100 permit ip any host ##固定IP8アドレス-2##
access-list 100 permit ip any host ##固定IP8アドレス-3##
access-list 100 permit ip any host ##固定IP8アドレス-4##
access-list 100 permit ip any host ##固定IP8アドレス-5##
access-list 109 deny ip any any
access-list 110 spi ip any any
access-list 4000 permit icmp6 any any neighbor-advertisement
access-list 4000 permit icmp6 any any neighbor-solicitation
access-list 4000 permit icmp6 any any router-advertisement
access-list 4000 permit udp any any eq 546
access-list 4009 deny ipv6 any any
access-list 4010 spi ipv6 any any
access-list 4100 permit tcp any any eq 53
access-list 4100 permit udp any any eq 53
access-list 4101 permit tcp any ::1/128
access-list 4101 permit udp any ::1/128
!
ip route 0.0.0.0 0.0.0.0 tunnel 1
ip name-server ::1
!
ip dhcp server-profile LAN
 address 192.168.0.2 192.168.0.254
 lease-time 28800
 dns 192.168.0.1
 gateway 192.168.0.1
exit
!
ip nat list 1 192.168.0.0 0.0.0.255
ip nat default action pass
!
ipv6 dhcp client-profile NGN
 option-request dns-server
 retries infinity
exit
!
ipv6 dhcp server-profile LANv6
 dns port-channel 1
exit
!
ipinip tunnel-profile IPIP1
 profile-mode ipip
 source ipv6 port-channel 11
 destination address ##トンネル終端装置 IPv6アドレス##
 ipinip fragment pre
exit
!
logging buffer level informational
!
aaa authentication login default local
aaa authorization exec default local
!
username test privilege 15 password 2 $1$LAruCQ4A$T3O69MOhXaiNub6xoHNsG1
!
hostname FITELnet
!
interface GigaEthernet 1/1
 vlan-id 11
 bridge-group 11
 channel-group 11
 policy-route input DNS-POLICY
exit
!
interface GigaEthernet 1/2
 vlan-id 12
 bridge-group 12
 channel-group 12
exit
!
interface GigaEthernet 2/1
 vlan-id 1
 bridge-group 1
 channel-group 1
 ipv6 access-group 4000 in
 ipv6 access-group 4009 in
 ipv6 access-group 4010 out
exit
!
interface Port-channel 1
 ipv6 enable
 ipv6 nd receive-ra prefix-delegation port-channel 11
 ipv6 router-lifetime-receive-enable
 ipv6 trust-ra-prefix-lifetime
 ipv6 dhcp service client
 ipv6 dhcp client-profile NGN
exit
!
interface Port-channel 11
 ip dhcp service server
 ip dhcp server-profile LAN
 ip address 192.168.0.1 255.255.255.0
 ipv6 enable
 ipv6 address autoconfig
 ipv6 nd other-config-flag
 ipv6 nd send-ra
 ipv6 trust-ra-prefix-lifetime
 ipv6 dhcp service server
 ipv6 dhcp server-profile LANv6
 mss 1420
 link-state always-up
 ddns-client address ipv6 action http-client 1 delay 10 interval 600
exit
!
interface Port-channel 12
 ip address ##固定IP8アドレス-6## 255.255.255.248
 mss 1420
exit
!
interface Tunnel 1
 ip address ##固定IP8アドレス-1## 255.255.255.255
 ip access-group 100 in
 ip access-group 109 in
 ip access-group 110 out
 ip nat inside source list 1 interface
 tunnel mode ipinip tunnel-profile IPIP1
exit
!
class-map DNS6
 match ipv6 access-group 4100
exit
!
class-map DNS6_LO
 match ipv6 access-group 4101
exit
!
policy-route-map DNS-POLICY
 !
 class DNS6
  search-sequence 10
  count
  action nexthop 2001:db8::1
 exit
 !
 class DNS6_LO
  search-sequence 1
  count
  action transmit
 exit
 !
exit
!
local policy-route DNS-POLICY
!
line console
 exec-timeout 0
 authorization exec default local
exit
!
line telnet
 exec-timeout 0
exit
!
dns-server ip enable
dns-server ipv6 enable
!
proxydns domain 1 any * any dhcp ipv6 port-channel 1 source-interface port-channel 11
proxydns address 1 any dhcp ipv6 port-channel 1 source-interface port-channel 11
!
http-client 1
 request-timeout 10 retry 5
 method 1 get url https://##Basic認証ID##:##Basic認証パスワード##@##アップデートサーバURL## d ##FQDN## p ##DDNSパスワード## u ##DDNS_ID## a $i6
 reference-interface port-channel 11
 source-interface port-channel 11
 logging on
exit
!
end
</pre>

<pre>
access-list 100 permit ip any host ##固定IP8アドレス-2##
access-list 100 permit ip any host ##固定IP8アドレス-3##
access-list 100 permit ip any host ##固定IP8アドレス-4##
access-list 100 permit ip any host ##固定IP8アドレス-5##
access-list 109 deny ip any any
access-list 110 spi ip any any
access-list 4000 permit icmp6 any any neighbor-advertisement
access-list 4000 permit icmp6 any any neighbor-solicitation
access-list 4000 permit icmp6 any any router-advertisement
access-list 4000 permit udp any any eq 546
access-list 4009 deny ipv6 any any
access-list 4010 spi ipv6 any any
!
ip route 0.0.0.0 0.0.0.0 tunnel 1
ip name-server ::1
!
ip dhcp server-profile LAN
 address 192.168.0.2 192.168.0.254
 lease-time 28800
 dns 192.168.0.1
 gateway 192.168.0.1
exit
!
ip nat list 1 192.168.0.0 0.0.0.255
ip nat default action pass
!
ipv6 route ::/0 dhcp port-channel 1
!
ipv6 dhcp client-profile NGN
 option-request prefix-delegation
 option-request dns-server
 retries infinity
exit
!
ipv6 dhcp server-profile LANv6
 dns port-channel 1
exit
!
ipinip tunnel-profile IPIP1
 profile-mode ipip
 source ipv6 port-channel 11
 destination address ##トンネル終端装置 IPv6アドレス##
 ipinip fragment pre
exit
!
logging buffer level informational
!
aaa authentication login default local
aaa authorization exec default local
!
username test privilege 15 password 2 $1$LAruCQ4A$T3O69MOhXaiNub6xoHNsG1
!
hostname FITELnet
!
interface GigaEthernet 1/1
 vlan-id 11
 bridge-group 11
 channel-group 11
exit
!
interface GigaEthernet 1/2
 vlan-id 12
 bridge-group 12
 channel-group 12
exit
!
interface GigaEthernet 2/1
 vlan-id 1
 bridge-group 1
 channel-group 1
 ipv6 access-group 4000 in
 ipv6 access-group 4009 in
 ipv6 access-group 4010 out
exit
!
interface Port-channel 1
 ipv6 enable
 ipv6 dhcp service client
 ipv6 dhcp client-profile NGN
exit
!
interface Port-channel 11
 ip dhcp service server
 ip dhcp server-profile LAN
 ip address 192.168.0.1 255.255.255.0
 ipv6 enable
 ipv6 address dhcp port-channel 1 ##インタフェースID##/64
 ipv6 nd other-config-flag
 ipv6 nd send-ra
 ipv6 trust-ra-prefix-lifetime
 ipv6 dhcp service server
 ipv6 dhcp server-profile LANv6
 mss 1420
 link-state always-up
 ddns-client address ipv6 action http-client 1 delay 10 interval 600
exit
!
interface Port-channel 12
 ip address ##固定IP8アドレス-6## 255.255.255.248
 mss 1420
exit
!
interface Tunnel 1
 ip address ##固定IP8アドレス-1## 255.255.255.255
 ip access-group 100 in
 ip access-group 109 in
 ip access-group 110 out
 ip nat inside source list 1 interface
 tunnel mode ipinip tunnel-profile IPIP1
exit
!
line console
 exec-timeout 0
 authorization exec default local
exit
!
line telnet
 exec-timeout 0
exit
!
dns-server ip enable
dns-server ipv6 enable
!
proxydns domain 1 any * any dhcp ipv6 port-channel 1 source-interface port-channel 11
proxydns address 1 any dhcp ipv6 port-channel 1 source-interface port-channel 11
!
http-client 1
 request-timeout 10 retry 5
 method 1 get url https://##Basic認証ID##:##Basic認証パスワード##@##アップデートサーバURL## d ##FQDN## p ##DDNSパスワード## u ##DDNS_ID## a $i6
 reference-interface port-channel 11
 source-interface port-channel 11
 logging on
exit
!
end
</pre>

（構成1）
RA-Proxy利用/HGWあり

（構成2）
RA-Proxy利用/HGWなし

（構成3）
DHCPv6-PD利用/HGWあり

（構成4）
DHCPv6-PD利用/HGWなし

ページの先頭へ

「クロスパス」を利用する対象装置：FITELnet F70/F71/F220/F221/F225/F310/F220 EX/F221 EX

補足・注意点