14/10/06 19:16:38.65
>>725
(B拠点のconfig)2/2
ip filter 101003 reject 192.168.87.0/24 * * * *
ip filter 101013 reject * 192.168.87.0/24 * * *
ip filter 101020 reject * * udp,tcp 135 *
ip filter 101021 reject * * udp,tcp * 135
ip filter 101022 reject * * udp,tcp netbios_ns-netbios_ssn *
ip filter 101023 reject * * udp,tcp * netbios_ns-netbios_ssn
ip filter 101024 reject * * udp,tcp 445 *
ip filter 101025 reject * * udp,tcp * 445
ip filter 101030 pass * * icmp * *
ip filter 101032 pass * * tcp * ident
ip filter 101083 pass * 192.168.87.252 tcp * 1723
ip filter 101084 pass * 192.168.87.252 gre * *
ip filter 101098 reject-nolog * * established
ip filter 101099 pass * * * * *
ip filter 500000 restrict * * * * *
nat descriptor type 200 masquerade
nat descriptor address outer 200 primary
nat descriptor masquerade static 200 4 192.168.87.252 tcp 1723
nat descriptor masquerade static 200 5 192.168.87.252 gre
nat descriptor type 202 nat
nat descriptor address outer 202 172.16.2.1-172.16.2.254
nat descriptor static 202 1 172.16.2.1=192.168.87.1 254
nat descriptor type 203 nat
nat descriptor address outer 203 172.16.1.1-172.16.1.254
nat descriptor static 203 1 172.16.1.1=192.168.87.1 254