{"id":90,"date":"2021-05-05T20:58:00","date_gmt":"2021-05-05T11:58:00","guid":{"rendered":"https:\/\/blog.andount.com\/?p=90"},"modified":"2026-04-18T15:30:39","modified_gmt":"2026-04-18T06:30:39","slug":"nec-ix2015%e3%82%92pppoe%e3%81%a7%e7%b9%8b%e3%81%84%e3%81%a0%e6%99%82%e3%81%ae%e8%a8%98%e9%8c%b2","status":"publish","type":"post","link":"https:\/\/blog.andount.com\/index.php\/2021\/05\/05\/90\/","title":{"rendered":"NEC IX2015\u3092PPPoE\u3067\u7e4b\u3044\u3060\u6642\u306e\u8a18\u9332"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">NEC IX2015\u306fNEC\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u30ba\u304c\u88fd\u9020\u3059\u308bSOHO\u5411\u3051\u30eb\u30fc\u30bf\u30fc\u3067\u3059\u3002FastEthernet\u306a\u304c\u3089\u8c4a\u5bcc\u306aACL\u6a5f\u80fd\u30fbPPPoE\u5bfe\u5fdc\u30fb\u30d7\u30ed\u30ad\u30b7DNS\u306a\u3069\u5b9f\u7528\u7684\u306a\u6a5f\u80fd\u304c\u5145\u5b9f\u3057\u3066\u304a\u308a\u3001\u81ea\u5b85\u30e9\u30dc\u3084\u5c0f\u898f\u6a21\u30aa\u30d5\u30a3\u30b9\u306b\u6700\u9069\u306a1\u53f0\u3067\u3059\u3002\u4eca\u56de\u306fPPPoE\u3067ISP\u8a8d\u8a3c\u3092\u884c\u3044\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u63a5\u7d9a\u3092\u78ba\u7acb\u3057\u305f\u969b\u306e\u8a2d\u5b9a\u3092\u307e\u3068\u3081\u307e\u3059\u3002<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/blog.andount.com\/index.php\/2021\/05\/05\/90\/#%E7%92%B0%E5%A2%83%E3%83%BB%E6%A7%8B%E6%88%90\" >\u74b0\u5883\u30fb\u69cb\u6210<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/blog.andount.com\/index.php\/2021\/05\/05\/90\/#%E8%A8%AD%E5%AE%9A%E3%81%AE%E3%83%9D%E3%82%A4%E3%83%B3%E3%83%88\" >\u8a2d\u5b9a\u306e\u30dd\u30a4\u30f3\u30c8<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/blog.andount.com\/index.php\/2021\/05\/05\/90\/#%E8%A8%AD%E5%AE%9A%E3%83%95%E3%82%A1%E3%82%A4%E3%83%AB\" >\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E7%92%B0%E5%A2%83%E3%83%BB%E6%A7%8B%E6%88%90\"><\/span>\u74b0\u5883\u30fb\u69cb\u6210<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>FE0\/0.1<\/strong>\uff1aWAN\uff08PPPoE\u63a5\u7d9a\u30fbISP\u8a8d\u8a3c\uff09<\/li><li><strong>FE0\/1.0<\/strong>\uff1a\u7121\u7ddaLAN\u5074\uff08192.168.11.0\/24\u30fbDHCP\u914d\u5e03\uff09<\/li><li><strong>FE1\/0.0<\/strong>\uff1a\u6709\u7ddaLAN\u5074\uff08192.168.1.0\/24\u30fbDHCP\u914d\u5e03\uff09<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E8%A8%AD%E5%AE%9A%E3%81%AE%E3%83%9D%E3%82%A4%E3%83%B3%E3%83%88\"><\/span>\u8a2d\u5b9a\u306e\u30dd\u30a4\u30f3\u30c8<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>PPPoE\u8a8d\u8a3c<\/strong>\uff1aFE0\/0.1\u306bencapsulation pppoe\u3092\u8a2d\u5b9a\u3057PPP\u30d7\u30ed\u30d5\u30a1\u30a4\u30eb\u3067ISP\u8a8d\u8a3c\u3057\u307e\u3059<\/li><li><strong>NAPT\uff08IP\u30de\u30b9\u30ab\u30ec\u30fc\u30c9\uff09<\/strong>\uff1aip napt enable\u3067LAN\u5074\u5168\u7aef\u672b\u304cWAN\u306eIP\u30a2\u30c9\u30ec\u30b9\u3092\u5171\u6709\u3057\u307e\u3059<\/li><li><strong>ACL\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0<\/strong>\uff1ablock_in\u30fbblock_out\u3067\u5371\u967a\u30dd\u30fc\u30c8\uff08Telnet\u30fbNetBIOS\u30fb\u5404\u7a2e\u30de\u30eb\u30a6\u30a7\u30a2\u30dd\u30fc\u30c8\u7b49\uff09\u3092\u30d6\u30ed\u30c3\u30af\u3057\u307e\u3059<\/li><li><strong>\u30d7\u30ed\u30ad\u30b7DNS<\/strong>\uff1aproxy-dns ip enable\u3067\u30eb\u30fc\u30bf\u30fc\u81ea\u8eab\u304cDNS\u30d7\u30ed\u30ad\u30b7\u3068\u3057\u3066\u52d5\u4f5c\u3057\u307e\u3059<\/li><li><strong>NTP\u6642\u523b\u540c\u671f<\/strong>\uff1aNICT\u306e\u30bf\u30a4\u30e0\u30b5\u30fc\u30d0\u30fc\uff08133.243.238.x\uff09\u3067\u81ea\u52d5\u6642\u523b\u540c\u671f\u3057\u307e\u3059<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E8%A8%AD%E5%AE%9A%E3%83%95%E3%82%A1%E3%82%A4%E3%83%AB\"><\/span>\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u4ee5\u4e0b\u306f\u5b9f\u969b\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3067\u3059\u3002\u30d1\u30b9\u30ef\u30fc\u30c9\u985e\u306f\u4f0f\u5b57\u306b\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code class=\"language-text\">hostname Router\ntimezone +09 00\n!\n!\n!\n!\n!\n!\nntp ip enable\nntp server 133.243.238.163\nntp server 133.243.238.164\nntp server 133.243.238.243\nntp server 133.243.238.244\nntp interval 3600\n!\n!\n!\nlogging buffered 4096\nlogging subsystem all warn\nlogging timestamp datetime\n!\n!\nip route default FastEthernet0\/0.1\nip dhcp enable\nip access-list all-block deny ip src any dest any\nip access-list all-pass permit ip src any dest any\nip access-list block_in deny tcp src any sport any dest any dport eq 21\nip access-list block_in deny tcp src any sport eq 21 dest any dport any\nip access-list block_in deny tcp src any sport any dest any dport eq 23\nip access-list block_in deny tcp src any sport eq 23 dest any dport any\nip access-list block_in deny tcp src any sport any dest any dport eq 1243\nip access-list block_in deny tcp src any sport eq 1243 dest any dport any\nip access-list block_in deny tcp src any sport any dest any dport eq 12345\nip access-list block_in deny tcp src any sport eq 12345 dest any dport any\nip access-list block_in deny tcp src any sport any dest any dport eq 27374\nip access-list block_in deny tcp src any sport eq 27374 dest any dport any\nip access-list block_in deny tcp src any sport any dest any dport eq 31785\nip access-list block_in deny tcp src any sport eq 31785 dest any dport any\nip access-list block_in deny udp src any sport any dest any dport eq 31789\nip access-list block_in deny udp src any sport eq 31789 dest any dport any\nip access-list block_in deny udp src any sport any dest any dport eq 31791\nip access-list block_in deny udp src any sport eq 31791 dest any dport any\nip access-list block_out deny tcp src any sport any dest any dport eq 135\nip access-list block_out deny tcp src any sport eq 135 dest any dport any\nip access-list block_out deny udp src any sport any dest any dport eq 135\nip access-list block_out deny udp src any sport eq 135 dest any dport any\nip access-list block_out deny tcp src any sport any dest any dport range 137 139\nip access-list block_out deny tcp src any sport range 137 139 dest any dport any\nip access-list block_out deny udp src any sport any dest any dport range 137 139\nip access-list block_out deny udp src any sport range 137 139 dest any dport any\nip access-list block_out deny tcp src any sport any dest any dport eq 445\nip access-list block_out deny tcp src any sport eq 445 dest any dport any\nip access-list block_out deny udp src any sport any dest any dport eq 445\nip access-list block_out deny udp src any sport eq 445 dest any dport any\nip access-list block_out deny tcp src any sport any dest any dport eq 2049\nip access-list block_out deny tcp src any sport eq 2049 dest any dport any\nip access-list block_out deny udp src any sport any dest any dport eq 2049\nip access-list block_out deny udp src any sport eq 2049 dest any dport any\nip access-list block_out deny tcp src any sport any dest any dport eq 1243\nip access-list block_out deny tcp src any sport eq 1243 dest any dport any\nip access-list block_out deny tcp src any sport any dest any dport eq 12345\nip access-list block_out deny tcp src any sport eq 12345 dest any dport any\nip access-list block_out deny tcp src any sport any dest any dport eq 27374\nip access-list block_out deny tcp src any sport eq 27374 dest any dport any\nip access-list block_out deny tcp src any sport any dest any dport eq 31785\nip access-list block_out deny tcp src any sport eq 31785 dest any dport any\nip access-list block_out deny udp src any sport any dest any dport eq 31789\nip access-list block_out deny udp src any sport eq 31789 dest any dport any\nip access-list block_out deny udp src any sport any dest any dport eq 31791\nip access-list block_out deny udp src any sport eq 31791 dest any dport any\nip access-list icmp permit icmp src any dest any\nip access-list local deny ip src 192.168.0.0\/16 dest 192.168.11.0\/24\nip access-list private deny ip src 0.0.0.0\/8 dest any\nip access-list private deny ip src 10.0.0.0\/8 dest any\nip access-list private deny ip src 127.0.0.0\/8 dest any\nip access-list private deny ip src 169.254.0.0\/16 dest any\nip access-list private deny ip src 172.16.0.0\/12 dest any\nip access-list private deny ip src 192.168.0.0\/16 dest any\nip access-list private deny ip src 224.0.0.0\/4 dest any\nip access-list tcp-pass permit tcp src any sport any dest any dport any\nip access-list telnet permit ip src 192.168.11.0\/24 dest any\nip access-list telnet deny ip src any dest any\nip access-list udp-pass permit udp src any sport any dest any dport any\nip access-list dynamic outside dns src any dest any\nip access-list dynamic outside ftp src any dest any\nip access-list dynamic outside http src any dest any\nip access-list dynamic outside sip src any dest any\nip access-list dynamic outside telnet src any dest any\nip access-list dynamic outside access tcp-pass\nip access-list dynamic outside access udp-pass\nip ufs-cache enable\n!\n!\n!\n!\n!\n!\n!\ndns cache enable\n!\nproxy-dns ip enable\nproxy-dns interface FastEthernet0\/0.1 priority 254\n!\ntelnet-server ip enable\ntelnet-server ip access-list telnet\n!\n!\n!\n!\n!\n!\n!\n!\n!\nppp profile internet\n  authentication myname ********\n  authentication password ******* *******\n!\nip dhcp profile wlan\n  assignable-range 192.168.11.3 192.168.11.200\n  subnet-mask 255.255.255.0\n  default-gateway 192.168.11.1\n  dns-server 192.168.11.1\n!\nip dhcp profile lan\n  assignable-range 192.168.1.2 192.168.1.200\n  subnet-mask 255.255.255.0\n  default-gateway 192.168.1.1\n  dns-server 192.168.1.1\n!\ndevice FastEthernet0\/0\n!\ndevice FastEthernet0\/1\n!\ndevice FastEthernet1\/0\n!\ndevice BRI1\/0\n  isdn switch-type hsd128k\n!\ninterface FastEthernet0\/0.0\n  no ip address\n  shutdown\n!\ninterface FastEthernet0\/1.0\n  description WirelessLAN\n  ip address 192.168.11.1\/24\n  ip dhcp binding wlan\n  no shutdown\n!\ninterface FastEthernet1\/0.0\n  description LAN\n  ip address 192.168.1.1\/24\n  ip dhcp binding lan\n  ip filter local 10 in\n  ip filter all-pass 65000 in\n  ip filter all-pass 65000 out\n  no shutdown\n!\ninterface BRI1\/0.0\n  encapsulation ppp\n  no auto-connect\n  no ip address\n  shutdown\n!\ninterface FastEthernet0\/0.1\n  description WAN\n  encapsulation pppoe\n  auto-connect\n  ppp binding internet\n  ip address ipcp\n  ip mtu 1492\n  ip tcp adjust-mss auto\n  ip napt enable\n  ip filter icmp 10 in\n  ip filter block_in 100 in\n  ip filter private 1000 in\n  ip filter all-block 65000 in\n  ip filter icmp 10 out\n  ip filter block_out 100 out\n  ip filter outside 1000 out\n  ip filter all-block 65000 out\n  no shutdown\n!\ninterface Loopback0.0\n  no ip address\n!\ninterface Null0.0\n  no ip address<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>NEC IX2015\u306fNEC\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u30ba\u304c\u88fd\u9020\u3059\u308bSOHO\u5411\u3051\u30eb\u30fc\u30bf\u30fc\u3067\u3059\u3002FastEthernet\u306a\u304c\u3089\u8c4a\u5bcc\u306aACL\u6a5f\u80fd\u30fbPPPoE\u5bfe\u5fdc\u30fb\u30d7\u30ed\u30ad\u30b7DNS\u306a\u3069\u5b9f\u7528\u7684\u306a\u6a5f\u80fd\u304c\u5145\u5b9f\u3057\u3066\u304a\u308a\u3001\u81ea\u5b85\u30e9\u30dc\u3084\u5c0f\u898f\u6a21\u30aa\u30d5\u30a3\u30b9\u306b\u6700\u2026 <span class=\"read-more\"><a href=\"https:\/\/blog.andount.com\/index.php\/2021\/05\/05\/90\/\">Read More: NEC IX2015\u2026 &raquo;<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-90","post","type-post","status-publish","format-standard","hentry","category-network"],"_links":{"self":[{"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/posts\/90","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/comments?post=90"}],"version-history":[{"count":2,"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/posts\/90\/revisions"}],"predecessor-version":[{"id":233,"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/posts\/90\/revisions\/233"}],"wp:attachment":[{"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/media?parent=90"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/categories?post=90"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/tags?post=90"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}