{"id":99,"date":"2020-11-07T16:53:39","date_gmt":"2020-11-07T07:53:39","guid":{"rendered":"https:\/\/blog.andount.com\/?p=99"},"modified":"2026-04-18T15:30:39","modified_gmt":"2026-04-18T06:30:39","slug":"cisco1812j%e3%82%92pppoe%e3%81%a7%e7%b9%8b%e3%81%84%e3%81%a0%e6%99%82%e3%81%ae%e8%a8%98%e9%8c%b2","status":"publish","type":"post","link":"https:\/\/blog.andount.com\/index.php\/2020\/11\/07\/99\/","title":{"rendered":"Cisco1812J\u3092PPPoE\u3067\u7e4b\u3044\u3060\u6642\u306e\u8a18\u9332"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Cisco 1812J\uff081800\u30b7\u30ea\u30fc\u30ba ISR\uff09\u306fCisco\u306e\u7d71\u5408\u30b5\u30fc\u30d3\u30b9\u30eb\u30fc\u30bf\u30fc\u3067\u3059\u3002CBAC\uff08Context-Based Access Control\uff09\u306b\u3088\u308b\u30b9\u30c6\u30fc\u30c8\u30d5\u30eb\u30a4\u30f3\u30b9\u30da\u30af\u30b7\u30e7\u30f3\u3084VLAN\u9593\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u306a\u3069\u3001\u4e2d\u5c0f\u898f\u6a21\u5411\u3051\u306e\u672c\u683c\u7684\u306a\u6a5f\u80fd\u3092\u5099\u3048\u3066\u3044\u307e\u3059\u3002\u4eca\u56de\u306fPPPoE\u3067\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u63a5\u7d9a\u3092\u78ba\u7acb\u3057\u305f\u969b\u306e\u8a2d\u5b9a\u3092\u307e\u3068\u3081\u307e\u3059\u3002<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/blog.andount.com\/index.php\/2020\/11\/07\/99\/#%E7%92%B0%E5%A2%83%E3%83%BB%E6%A7%8B%E6%88%90\" >\u74b0\u5883\u30fb\u69cb\u6210<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/blog.andount.com\/index.php\/2020\/11\/07\/99\/#%E8%A8%AD%E5%AE%9A%E3%81%AE%E3%83%9D%E3%82%A4%E3%83%B3%E3%83%88\" >\u8a2d\u5b9a\u306e\u30dd\u30a4\u30f3\u30c8<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/blog.andount.com\/index.php\/2020\/11\/07\/99\/#%E8%A8%AD%E5%AE%9A%E3%83%95%E3%82%A1%E3%82%A4%E3%83%AB\" >\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E7%92%B0%E5%A2%83%E3%83%BB%E6%A7%8B%E6%88%90\"><\/span>\u74b0\u5883\u30fb\u69cb\u6210<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>FE0<\/strong>\uff1aWAN\uff08PPPoE\u63a5\u7d9a\u30fbDialer1\u3092\u4f7f\u7528\uff09<\/li><li><strong>FE1<\/strong>\uff1a\u7121\u7ddaLAN\uff08192.168.11.1\/24\uff09<\/li><li><strong>FE2\u301c9<\/strong>\uff1a\u5185\u90e8\u30b9\u30a4\u30c3\u30c1\u30dd\u30fc\u30c8\uff08VLAN1\u301c3\u306b\u5206\u5272\uff09<\/li><li><strong>Vlan1<\/strong>\uff1a192.168.1.0\/24\u3001<strong>Vlan2<\/strong>\uff1a192.168.2.0\/24\u3001<strong>Vlan3<\/strong>\uff1a192.168.3.0\/24<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E8%A8%AD%E5%AE%9A%E3%81%AE%E3%83%9D%E3%82%A4%E3%83%B3%E3%83%88\"><\/span>\u8a2d\u5b9a\u306e\u30dd\u30a4\u30f3\u30c8<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>PPPoE\uff08Dialer1\uff09<\/strong>\uff1aFE0\u306bpppoe-client\u8a2d\u5b9a\u3092\u884c\u3044Dialer1\u3067WAN\u63a5\u7d9a\u3092\u78ba\u7acb\u3057\u307e\u3059<\/li><li><strong>CBAC\uff08\u30b9\u30c6\u30fc\u30c8\u30d5\u30eb\u691c\u67fb\uff09<\/strong>\uff1aip inspect CBAC\u3067Dialer1\u30a4\u30f3\u30d0\u30a6\u30f3\u30c9\u306e\u901a\u4fe1\u3092\u52d5\u7684\u306b\u691c\u67fb\u3057\u307e\u3059<\/li><li><strong>VLAN\u5206\u5272<\/strong>\uff1a\u5185\u90e8\u30b9\u30a4\u30c3\u30c1\u30dd\u30fc\u30c8\u3092VLAN2\u301c3\u306b\u5206\u5272\u3057\u30bb\u30b0\u30e1\u30f3\u30c8\u3092\u5206\u96e2\u3057\u307e\u3059<\/li><li><strong>NAT<\/strong>\uff1aip nat inside source list 1 interface Dialer1 overload\u3067IP\u30de\u30b9\u30ab\u30ec\u30fc\u30c9\u3057\u307e\u3059<\/li><li><strong>ACL\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0<\/strong>\uff1aBlock_IN\u30fbBlock_OUT\u3067Bogon\u30a2\u30c9\u30ec\u30b9\u3084\u5371\u967a\u30dd\u30fc\u30c8\u3092\u30d6\u30ed\u30c3\u30af\u3057\u307e\u3059<\/li><li><strong>SSH v2\u306e\u307f\u8a31\u53ef<\/strong>\uff1avty\u3078\u306e\u30a2\u30af\u30bb\u30b9\u306fSSH v2\u306e\u307f\u306b\u5236\u9650\u3057\u7ba1\u7406\u30a2\u30af\u30bb\u30b9\u3092\u4fdd\u8b77\u3057\u307e\u3059<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E8%A8%AD%E5%AE%9A%E3%83%95%E3%82%A1%E3%82%A4%E3%83%AB\"><\/span>\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u4ee5\u4e0b\u306f\u5b9f\u969b\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3067\u3059\u3002\u30d1\u30b9\u30ef\u30fc\u30c9\u985e\u306f\u4f0f\u5b57\u306b\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code class=\"language-text\">Building configuration...\n\nCurrent configuration : 6866 bytes\n!\nversion 15.1\nservice timestamps debug datetime msec\nservice timestamps log datetime msec\nservice password-encryption\n!\nhostname Router\n!\nboot-start-marker\nboot-end-marker\n!\n!\n!\nno aaa new-model\n!\nclock timezone JST 9 0\ncrypto pki token default removal timeout 0\ndot11 syslog\nip source-route\n!\n!\n!\nip dhcp pool wlan\n network 192.168.11.0 255.255.255.0\n default-router 192.168.11.1\n dns-server 192.168.11.1\n!\nip dhcp pool vlan1\n network 192.168.1.0 255.255.255.0\n default-router 192.168.1.1\n dns-server 192.168.1.1\n!\nip dhcp pool vlan2\n network 192.168.2.0 255.255.255.0\n dns-server 192.168.2.1\n default-router 192.168.2.1\n!\nip dhcp pool vlan3\n network 192.168.3.0 255.255.255.0\n dns-server 192.168.3.1\n default-router 192.168.3.1\n!\n!\n!\nip cef\nip inspect name CBAC tcp\nip inspect name CBAC udp\nip inspect name CBAC icmp\nip inspect name CBAC dns\nip inspect name CBAC ftp\nip inspect name CBAC http\nip inspect name CBAC https\nip inspect name CBAC sip\nip inspect name CBAC telnet\nip inspect name CBAC ssh\nno ipv6 cef\n!\nmultilink bundle-name authenticated\n!\nvpdn enable\n!\n!\n!\nlicense udi pid CISCO1812-J\/K9 sn FHK112911CE\n!\nspanning-tree portfast bpduguard\n!\nip ssh version 2\n!\n!\n!\n!\n!\n!\n!\ninterface BRI0\n no ip address\n encapsulation hdlc\n shutdown\n!\ninterface FastEthernet0\n no ip address\n duplex auto\n speed auto\n pppoe enable group global\n pppoe-client dial-pool-number 1\n!\ninterface FastEthernet1\n description WirelessLAN\n ip address 192.168.11.1 255.255.255.0\n ip nat inside\n ip virtual-reassembly in\n ip tcp adjust-mss 1452\n duplex auto\n speed auto\n!\ninterface FastEthernet2\n switchport mode trunk\n no ip address\n spanning-tree portfast\n!\ninterface FastEthernet3\n no ip address\n spanning-tree portfast\n!\ninterface FastEthernet4\n switchport access vlan 2\n no ip address\n spanning-tree portfast\n!\ninterface FastEthernet5\n switchport access vlan 2\n no ip address\n spanning-tree portfast\n!\ninterface FastEthernet6\n switchport access vlan 3\n no ip address\n spanning-tree portfast\n!\ninterface FastEthernet7\n switchport access vlan 3\n no ip address\n spanning-tree portfast\n!\ninterface FastEthernet8\n switchport access vlan 3\n no ip address\n spanning-tree portfast\n!\ninterface FastEthernet9\n switchport access vlan 3\n no ip address\n spanning-tree portfast\n!\ninterface Vlan1\n ip address 192.168.1.1 255.255.255.0\n ip nat inside\n ip virtual-reassembly in\n ip tcp adjust-mss 1452\n!\ninterface Vlan2\n ip address 192.168.2.1 255.255.255.0\n ip nat inside\n ip virtual-reassembly in\n ip tcp adjust-mss 1452\n!\ninterface Vlan3\n ip address 192.168.3.1 255.255.255.0\n ip nat inside\n ip virtual-reassembly in\n ip tcp adjust-mss 1452\n!\ninterface Dialer1\n ip address negotiated\n ip access-group Block_IN in\n ip access-group Block_OUT out\n ip mtu 1492\n ip nat outside\n ip inspect CBAC in\n ip virtual-reassembly in\n encapsulation ppp\n ip tcp adjust-mss 1452\n dialer pool 1\n dialer-group 1\n ppp authentication chap callin\n ppp chap hostname ********\n ppp chap password 7 ********\n!\nip forward-protocol nd\nno ip http server\nno ip http secure-server\n!\n!\nip dns view default\n dns forwarder 129.250.35.250\n dns forwarder 129.250.35.251\n dns forwarding source-interface Dialer1\nip dns server\nip nat inside source list 1 interface Dialer1 overload\nip route 0.0.0.0 0.0.0.0 Dialer1 permanent\n!\nip access-list extended Block_IN\n deny   ip 0.0.0.0 0.255.255.255 any\n deny   ip 10.0.0.0 0.255.255.255 any\n deny   ip 127.0.0.0 0.255.255.255 any\n deny   ip 169.254.0.0 0.0.255.255 any\n deny   ip 172.16.0.0 0.15.255.255 any\n deny   ip 192.168.0.0 0.0.255.255 any\n deny   ip 224.0.0.0 16.255.255.255 any\n deny   tcp any any eq ftp\n deny   tcp any any eq telnet\n deny   tcp any any eq 1243\n deny   tcp any any eq 12345\n deny   tcp any any eq 27374\n deny   tcp any any eq 31785\n deny   udp any any eq 31789\n deny   udp any any eq 31791\n permit ip any any\nip access-list extended Block_OUT\n deny   tcp any any eq 135\n deny   udp any any eq 135\n deny   tcp any any range 137 139\n deny   udp any any range netbios-ns netbios-ss\n deny   tcp any any eq 445\n deny   udp any any eq 445\n deny   tcp any any eq 2049\n deny   udp any any eq 2049\n deny   tcp any any eq 1243\n deny   tcp any any eq 12345\n deny   tcp any any eq 27374\n deny   tcp any any eq 31785\n deny   udp any any eq 31789\n deny   udp any any eq 31791\n permit ip any any\n!\naccess-list 1 permit 192.168.11.0 0.0.0.255\naccess-list 1 permit 192.168.1.0 0.0.0.255\naccess-list 1 permit 192.168.2.0 0.0.0.255\naccess-list 1 permit 192.168.3.0 0.0.0.255\naccess-list 2 permit 192.168.1.0 0.0.0.255\naccess-list 2 deny   any\ndialer-list 1 protocol ip permit\n!\n!\n!\n!\n!\n!\ncontrol-plane\n!\n!\n!\nline con 0\n login local\nline aux 0\nline vty 0 4\n access-class 2 in\n login local\n transport input ssh\nline vty 5 15\n access-class 2 in\n login local\n transport input ssh\n!\nntp server 133.243.238.163\nntp server 133.243.238.164\nntp server 133.243.238.243\nntp server 133.243.238.244\nend<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Cisco 1812J\uff081800\u30b7\u30ea\u30fc\u30ba ISR\uff09\u306fCisco\u306e\u7d71\u5408\u30b5\u30fc\u30d3\u30b9\u30eb\u30fc\u30bf\u30fc\u3067\u3059\u3002CBAC\uff08Context-Based Access Control\uff09\u306b\u3088\u308b\u30b9\u30c6\u30fc\u30c8\u30d5\u30eb\u30a4\u30f3\u30b9\u30da\u30af\u30b7\u30e7\u30f3\u3084VLAN\u9593\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u306a\u3069\u2026 <span class=\"read-more\"><a href=\"https:\/\/blog.andount.com\/index.php\/2020\/11\/07\/99\/\">Read More: Cisco1812J\u2026 &raquo;<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-99","post","type-post","status-publish","format-standard","hentry","category-network"],"_links":{"self":[{"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/posts\/99","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/comments?post=99"}],"version-history":[{"count":2,"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/posts\/99\/revisions"}],"predecessor-version":[{"id":235,"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/posts\/99\/revisions\/235"}],"wp:attachment":[{"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/media?parent=99"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/categories?post=99"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.andount.com\/index.php\/wp-json\/wp\/v2\/tags?post=99"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}