「BIGLOBE 德赢ac米兰官方合作伙伴サービス（IPIP）」を利用する対象装置：F70/F71/德赢ac米兰官方合作伙伴0/德赢ac米兰官方合作伙伴1/德赢ac米兰官方合作伙伴0 EX/德赢ac米兰官方合作伙伴1 EX/德赢ac米兰官方合作伙伴5/F310

ビッグローブ社の「BIGLOBE 德赢ac米兰官方合作伙伴サービス（IPIP）」を利用する場合の設定例です。

本設定例では、「BIGLOBE 德赢ac米兰官方合作伙伴サービス（IPIP）」に対応した国内標準方式^（注1）をご説明します。

（注1）德赢ac米兰官方合作伙伴普及・高度化推進協議会で策定された「德赢ac米兰官方合作伙伴マイグレーション技術の国内標準プロビジョニング方式（第1.1版）」です。
F70/F71はV01.10より、德赢ac米兰官方合作伙伴0/德赢ac米兰官方合作伙伴1はV01.12より、それぞれサポートしています。

補足・注意点

下記表の德赢ac米兰官方合作伙伴PDFファイルの補足欄にコマンドの補足説明や注意点を記載しておりますので、ご確認ください。

德赢ac米兰官方合作伙伴	德赢ac米兰官方合作伙伴（txt）
HB46PP^（注2）による国内標準方式（HGWありなしどちらも対応）（構成1）（構成2）New （注2） HTTP-Based IPv4 over 德赢ac米兰官方合作伙伴 Provisioning Protocol	この德赢ac米兰官方合作伙伴のご利用は

'); subwindow.document.write('

'); subwindow.document.close(); }

<pre>!
access-list 100 permit udp any eq 67 any eq 68
access-list 109 deny ip any any
access-list 110 spi ip any any
access-list 4000 permit icmp6 any any neighbor-advertisement
access-list 4000 permit icmp6 any any neighbor-solicitation
access-list 4000 permit icmp6 any any router-advertisement
access-list 4000 permit udp any any eq 546
access-list 4009 deny 德赢ac米兰官方合作伙伴 any any
access-list 4010 spi 德赢ac米兰官方合作伙伴 any any
access-list 4100 permit tcp any any eq 53
access-list 4100 permit udp any any eq 53
access-list 4101 permit tcp any ::1/128
access-list 4101 permit udp any ::1/128
!
ip route 0.0.0.0 0.0.0.0 tunnel 1
ip name-server ::1
!
ip dhcp client-profile DHCPv4_client
 retries infinity
exit
!
ip dhcp server-profile DHCPv4_server
 address 192.168.100.2 192.168.100.254
 lease-time 259200
 dns 192.168.100.1
 gateway 192.168.100.1
exit
!
ip nat list 1 192.168.100.0 0.0.0.255
ip nat wellknown 1 1 65535 off
!
德赢ac米兰官方合作伙伴 dhcp client-profile DHCPv6_client
 option-request dns-server
 option-request dns-server-domain
 retries infinity
exit
!
德赢ac米兰官方合作伙伴 dhcp server-profile DHCPv6_server
 dns port-channel 2
 domain port-channel 2
exit
!
ipinip tunnel-profile 46PP
 profile-mode 46pp
 ipinip fragment pre
 set 46pp capability ipip
 set 46pp username ##ユーザ名## password ##パスワード##
exit
!
logging buffer level informational
!
aaa authentication login default local login
aaa authorization exec default local
!
ntp server ##NTPサーバ##
!
username st privilege 15 password 2 $qDR/BSHaiSpgVR6awMhNoMC7i8qL/
!
hostname FITELnet
!
interface GigaEthernet 1/1
 vlan-id 1
 bridge-group 1
 channel-group 1
 policy-route input DNS-POLICY
exit
!
interface GigaEthernet 2/1
 vlan-id 2
 bridge-group 2
 channel-group 2
 ip access-group 100 in
 ip access-group 109 in
 ip access-group 110 out
 德赢ac米兰官方合作伙伴 access-group 4000 in
 德赢ac米兰官方合作伙伴 access-group 4009 in
 德赢ac米兰官方合作伙伴 access-group 4010 out
exit
!
interface Port-channel 1
 ip dhcp service server
 ip dhcp server-profile DHCPv4_server
 ip address 192.168.100.1 255.255.255.0
 德赢ac米兰官方合作伙伴 enable
 德赢ac米兰官方合作伙伴 address autoconfig
 德赢ac米兰官方合作伙伴 address autoconfig-46pp 46PP
 德赢ac米兰官方合作伙伴 nd other-config-flag
 德赢ac米兰官方合作伙伴 nd send-ra
 德赢ac米兰官方合作伙伴 trust-ra-prefix-lifetime
 德赢ac米兰官方合作伙伴 dhcp service server
 德赢ac米兰官方合作伙伴 dhcp server-profile DHCPv6_server
 link-state always-up
exit
!
interface Port-channel 2
 ip dhcp service client
 ip dhcp client-profile DHCPv4_client
 德赢ac米兰官方合作伙伴 enable
 德赢ac米兰官方合作伙伴 nd receive-ra prefix-delegation port-channel 1
 德赢ac米兰官方合作伙伴 router-lifetime-receive-enable
 德赢ac米兰官方合作伙伴 trust-ra-prefix-lifetime
 德赢ac米兰官方合作伙伴 dhcp service client
 德赢ac米兰官方合作伙伴 dhcp client-profile DHCPv6_client
exit
!
interface Tunnel 1
 ip access-group 109 in
 ip access-group 110 out
 ip nat inside source list 1 46pp overload
 tunnel mode ipinip tunnel-profile 46PP
exit
!
line console
 exec-timeout 0
 authorization exec default local
exit
!
line telnet
 exec-timeout 0
exit
!
class-map DNS6
 match 德赢ac米兰官方合作伙伴 access-group 4100
exit
!
class-map DNS6_LO
 match 德赢ac米兰官方合作伙伴 access-group 4101
exit
!
policy-route-map DNS-POLICY
 !
 class DNS6
  search-sequence 10
  count
  action nexthop 2001:db8::1
 exit
 !
 class DNS6_LO
  search-sequence 1
  count
  action transmit
 exit
 !
exit
!
local policy-route DNS-POLICY
!
dns-server ip enable
dns-server 德赢ac米兰官方合作伙伴 enable
!
proxydns domain 1 any * any dhcp 德赢ac米兰官方合作伙伴 port-channel 2 source-interface port-channel 1
proxydns address 1 any dhcp 德赢ac米兰官方合作伙伴 port-channel 2 source-interface port-channel 1
!
end</pre>

<pre>access-list 100 permit udp any eq 67 any eq 68
access-list 109 deny ip any any
access-list 110 spi ip any any
access-list 4000 permit icmp6 any any neighbor-advertisement
access-list 4000 permit icmp6 any any neighbor-solicitation
access-list 4000 permit icmp6 any any router-advertisement
access-list 4000 permit udp any any eq 546
access-list 4009 deny 德赢ac米兰官方合作伙伴 any any
access-list 4010 spi 德赢ac米兰官方合作伙伴 any any
access-list 4100 permit tcp any any eq 53
access-list 4100 permit udp any any eq 53
access-list 4101 permit tcp any ::1/128
access-list 4101 permit udp any ::1/128
!
ip route 0.0.0.0 0.0.0.0 tunnel 1
ip name-server ::1
!
ip dhcp client-profile DHCPv4_client
 retries infinity
exit
!
ip dhcp server-profile DHCPv4_server
 address 192.168.100.2 192.168.100.254
 lease-time 259200
 dns 192.168.100.1
 gateway 192.168.100.1
exit
!
ip nat list 1 192.168.100.0 0.0.0.255
ip nat wellknown 1 1 65535 off
ip nat port-sharing enable
!
德赢ac米兰官方合作伙伴 dhcp client-profile DHCPv6_client
 option-request dns-server
 option-request dns-server-domain
 retries infinity
exit
!
德赢ac米兰官方合作伙伴 dhcp server-profile DHCPv6_server
 dns port-channel 2
 domain port-channel 2
exit
!
ipinip tunnel-profile MAPCE
 profile-mode map-encap option-b
 map rule-get
 ipinip fragment pre
exit
!
logging buffer level informational
!
aaa authentication login default local
aaa authorization exec default local
!
ntp server ##NTPサーバ##
!
username st privilege 15 password 2 $yg27Q4xa$FzRzJaCNDLIPbh86A/Q9z/
!
hostname FITELnet
!
interface GigaEthernet 1/1
 vlan-id 1
 bridge-group 1
 channel-group 1
 policy-route input DNS-POLICY
exit
!
interface GigaEthernet 2/1
 vlan-id 2
 bridge-group 2
 channel-group 2
 ip access-group 100 in
 ip access-group 109 in
 ip access-group 110 out
 德赢ac米兰官方合作伙伴 access-group 4000 in
 德赢ac米兰官方合作伙伴 access-group 4009 in
 德赢ac米兰官方合作伙伴 access-group 4010 out
 德赢ac米兰官方合作伙伴 access-group spi ftp-data enable
exit
!
interface Port-channel 1
 ip dhcp service server
 ip dhcp server-profile DHCPv4_server
 ip address 192.168.100.1 255.255.255.0
 德赢ac米兰官方合作伙伴 enable
 德赢ac米兰官方合作伙伴 address autoconfig
 德赢ac米兰官方合作伙伴 address autoconfig-map-encap MAPCE
 德赢ac米兰官方合作伙伴 nd other-config-flag
 德赢ac米兰官方合作伙伴 nd send-ra
 德赢ac米兰官方合作伙伴 trust-ra-prefix-lifetime
 德赢ac米兰官方合作伙伴 dhcp service server
 德赢ac米兰官方合作伙伴 dhcp server-profile DHCPv6_server
 link-state always-up
 mss 1420
exit
!
interface Port-channel 2
 ip dhcp service client
 ip dhcp client-profile DHCPv4_client
 德赢ac米兰官方合作伙伴 enable
 德赢ac米兰官方合作伙伴 nd receive-ra prefix-delegation port-channel 1
 德赢ac米兰官方合作伙伴 router-lifetime-receive-enable
 德赢ac米兰官方合作伙伴 trust-ra-prefix-lifetime
 德赢ac米兰官方合作伙伴 dhcp service client
 德赢ac米兰官方合作伙伴 dhcp client-profile DHCPv6_client
exit
!
interface Tunnel 1
 ip access-group 109 in
 ip access-group 110 out
 ip access-group spi ftp-data enable
 ip nat inside source list 1 map-encap overload
 tunnel mode ipinip tunnel-profile MAPCE
exit
!
line console
 exec-timeout 0
 authorization exec default local
exit
!
line telnet
 exec-timeout 0
exit
!
class-map DNS6
 match 德赢ac米兰官方合作伙伴 access-group 4100
exit
!
class-map DNS6_LO
 match 德赢ac米兰官方合作伙伴 access-group 4101
exit
!
policy-route-map DNS-POLICY
 !
 class DNS6
  search-sequence 10
  count
  action nexthop 2001:db8::1
 exit
 !
 class DNS6_LO
  search-sequence 1
  count
  action transmit
 exit
 !
exit
!
local policy-route DNS-POLICY
!
dns-server ip enable
dns-server 德赢ac米兰官方合作伙伴 enable
!
proxydns domain 1 any ntt.setup ::1/128 dhcp-no-skip ipv4 port-channel 2
proxydns domain 2 any * any dhcp 德赢ac米兰官方合作伙伴 port-channel 2
proxydns address 1 any dhcp 德赢ac米兰官方合作伙伴 port-channel 2
!
end</pre>

<pre>access-list 109 deny ip any any
access-list 110 spi ip any any
access-list 4000 permit icmp6 any any neighbor-advertisement
access-list 4000 permit icmp6 any any neighbor-solicitation
access-list 4000 permit icmp6 any any router-advertisement
access-list 4000 permit udp any any eq 546
access-list 4009 deny 德赢ac米兰官方合作伙伴 any any
access-list 4010 spi 德赢ac米兰官方合作伙伴 any any
access-list 4100 permit tcp any any eq 53
access-list 4100 permit udp any any eq 53
access-list 4101 permit tcp any ::1/128
access-list 4101 permit udp any ::1/128
!
ip route 0.0.0.0 0.0.0.0 tunnel 1
ip name-server ::1
!
ip dhcp server-profile DHCPv4_server
 address 192.168.100.2 192.168.100.254
 lease-time 259200
 dns 192.168.100.1
 gateway 192.168.100.1
exit
!
ip nat list 1 192.168.100.0 0.0.0.255
ip nat wellknown 1 1 65535 off
ip nat port-sharing enable
!
德赢ac米兰官方合作伙伴 dhcp client-profile DHCPv6_client
 option-request dns-server
 option-request dns-server-domain
 retries infinity
exit
!
德赢ac米兰官方合作伙伴 dhcp server-profile DHCPv6_server
 dns port-channel 2
 domain port-channel 2
exit
!
ipinip tunnel-profile MAPCE
 profile-mode map-encap option-b
 map rule-get
 ipinip fragment pre
exit
!
logging buffer level informational
!
aaa authentication login default local
aaa authorization exec default local
!
ntp server ##NTPサーバ##
!
username st privilege 15 password 2 $yg27Q4xa$FzRzJaCNDLIPbh86A/Q9z/
!
hostname FITELnet
!
interface GigaEthernet 1/1
 vlan-id 1
 bridge-group 1
 channel-group 1
 policy-route input DNS-POLICY
exit
!
interface GigaEthernet 2/1
 vlan-id 2
 bridge-group 2
 channel-group 2
 德赢ac米兰官方合作伙伴 access-group 4000 in
 德赢ac米兰官方合作伙伴 access-group 4009 in
 德赢ac米兰官方合作伙伴 access-group 4010 out
 德赢ac米兰官方合作伙伴 access-group spi ftp-data enable
exit
!
interface Port-channel 1
 ip dhcp service server
 ip dhcp server-profile DHCPv4_server
 ip address 192.168.100.1 255.255.255.0
 德赢ac米兰官方合作伙伴 enable
 德赢ac米兰官方合作伙伴 address autoconfig
 德赢ac米兰官方合作伙伴 address autoconfig-map-encap MAPCE
 德赢ac米兰官方合作伙伴 nd other-config-flag
 德赢ac米兰官方合作伙伴 nd send-ra
 德赢ac米兰官方合作伙伴 trust-ra-prefix-lifetime
 德赢ac米兰官方合作伙伴 dhcp service server
 德赢ac米兰官方合作伙伴 dhcp server-profile DHCPv6_server
 link-state always-up
 mss 1420
exit
!
interface Port-channel 2
 德赢ac米兰官方合作伙伴 enable
 德赢ac米兰官方合作伙伴 nd receive-ra prefix-delegation port-channel 1
 德赢ac米兰官方合作伙伴 router-lifetime-receive-enable
 德赢ac米兰官方合作伙伴 trust-ra-prefix-lifetime
 德赢ac米兰官方合作伙伴 dhcp service client
 德赢ac米兰官方合作伙伴 dhcp client-profile DHCPv6_client
exit
!
interface Tunnel 1
 ip access-group 109 in
 ip access-group 110 out
 ip access-group spi ftp-data enable
 ip nat inside source list 1 map-encap overload
 tunnel mode ipinip tunnel-profile MAPCE
exit
!
line console
 exec-timeout 0
 authorization exec default local
exit
!
line telnet
 exec-timeout 0
exit
!
class-map DNS6
 match 德赢ac米兰官方合作伙伴 access-group 4100
exit
!
class-map DNS6_LO
 match 德赢ac米兰官方合作伙伴 access-group 4101
exit
!
policy-route-map DNS-POLICY
 !
 class DNS6
  search-sequence 10
  count
  action nexthop 2001:db8::1
 exit
 !
 class DNS6_LO
  search-sequence 1
  count
  action transmit
 exit
 !
exit
!
local policy-route DNS-POLICY
!
dns-server ip enable
dns-server 德赢ac米兰官方合作伙伴 enable
!
proxydns domain 1 any * any dhcp 德赢ac米兰官方合作伙伴 port-channel 2
proxydns address 1 any dhcp 德赢ac米兰官方合作伙伴 port-channel 2
!
end</pre>

（構成1）HGWあり

（構成2）HGWなし

ページの先頭へ