激安IPsecルータ(Fujitsu Si-R180)の速度を調べてみる5
コンフィグをさらしてみる。
マニュアルどおり。
共有鍵もマニュアルのデフォルト。
[Si-R180-r1] switch 0 use on switch 0 port 2 use off switch 0 port 3 use off switch 0 port 4 use off lan 0 mode auto lan 0 ip address 10.0.0.1/24 3 lan 1 mode auto lan 1 ip address 192.168.0.254/24 3 lan 1 vlan bind switch 0 remote 1 name R1toR2 remote 1 ap 0 name router2 remote 1 ap 0 datalink type ipsec remote 1 ap 0 ipsec type ike remote 1 ap 0 ipsec ike protocol esp remote 1 ap 0 ipsec ike range 192.168.0.0/24 any4 remote 1 ap 0 ipsec ike encrypt des-cbc remote 1 ap 0 ipsec ike auth hmac-md5 remote 1 ap 0 ike mode main remote 1 ap 0 ike shared key text d@DQhSjMx47CcUsXI@W07lA@L7foVdG@AArDvwENn6J@ApYtfd4fZl encrypted remote 1 ap 0 ike proposal 0 encrypt des-cbc remote 1 ap 0 tunnel local 10.0.0.1 remote 1 ap 0 tunnel remote 10.0.0.2 remote 1 ip route 0 192.168.1.0/24 1 0 syslog pri error,warn,info syslog facility 23 time auto server 0.0.0.0 dhcp time auto interval start time zone 0900 consoleinfo autologout 8h telnetinfo autologout 5m sysname Si-R180-r1 alias history "show logging command brief" terminal pager enable terminal charset SJIS
[Si-R180-r2] lan 0 mode auto lan 0 ip address 10.0.0.2/24 3 lan 1 mode auto lan 1 ip address 192.168.1.254/24 3 remote 0 name R2toR1 remote 0 ap 0 name router1 remote 0 ap 0 datalink type ipsec remote 0 ap 0 ipsec type ike remote 0 ap 0 ipsec ike protocol esp remote 0 ap 0 ipsec ike range any4 192.168.0.0/24 remote 0 ap 0 ipsec ike encrypt des-cbc remote 0 ap 0 ipsec ike auth hmac-md5 remote 0 ap 0 ike mode main remote 0 ap 0 ike shared key text d@DQhSjMx47CcUsXI@W07lA@L7foVdG@AArDvwENn6J@ApYtfd4fZl encrypted remote 0 ap 0 ike proposal 0 encrypt des-cbc remote 0 ap 0 tunnel local 10.0.0.2 remote 0 ap 0 tunnel remote 10.0.0.1 remote 0 ip route 0 192.168.0.0/24 1 0 syslog pri error,warn,info syslog facility 23 time auto server 0.0.0.0 dhcp time auto interval start time zone 0900 consoleinfo autologout 8h telnetinfo autologout 5m sysname Si-R180-r2 alias history "show logging command brief" terminal pager enable terminal charset SJIS