{"id":5191,"date":"2014-07-14T11:30:49","date_gmt":"2014-07-14T02:30:49","guid":{"rendered":"http:\/\/www.creationline.com\/?p=5191"},"modified":"2026-05-27T22:14:36","modified_gmt":"2026-05-27T13:14:36","slug":"%e3%82%bd%e3%83%95%e3%83%88%e3%82%a6%e3%82%a7%e3%82%a2%e3%83%ab%e3%83%bc%e3%82%bfvyatta%e3%81%a8vyos%e3%82%92%e7%94%a8%e3%81%84%e3%81%a6softlayer%e3%81%a8%e3%82%aa%e3%83%95%e3%82%a3%e3%82%b9%e3%82%92i","status":"publish","type":"post","link":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191","title":{"rendered":"\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bfVyatta\u3068VyOS\u3092\u7528\u3044\u3066SoftLayer\u3068\u30aa\u30d5\u30a3\u30b9\u3092IPsec VPN\u63a5\u7d9a\u3059\u308b #softlayer"},"content":{"rendered":"<h2>VyOS \u3068\u306f<\/h2>\n<p><a href=\"http:\/\/vyos.net\/\">VyOS<\/a> \u3068\u306f\u3001\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u3067\u958b\u767a\u3055\u308c\u3066\u3044\u308b\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bf\u3067\u3059\u3002Debian GNU\/Linux \u3092\u30d9\u30fc\u30b9\u3068\u3057\u3001\u30eb\u30fc\u30bf\u3068\u3057\u3066\u52d5\u4f5c\u3059\u308b\u305f\u3081\u306e\u3055\u307e\u3056\u307e\u306a\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u3084\u7ba1\u7406\u7528\u306e\u30b3\u30de\u30f3\u30c9\u304c\u642d\u8f09\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>VyOS \u306f <a href=\"http:\/\/www.vyatta.com\/\">Vyatta<\/a> \u304b\u3089\u6d3e\u751f\u3057\u305f\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bf\u3067\u3059\u3002Vyatta \u306f\u5f53\u521d\u3001\u7c73 Vyatta \u793e\u306b\u3088\u3063\u3066\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u3067\u958b\u767a\u3055\u308c\u3001\u6709\u511f\u7248\u3068\u7121\u511f\u7248\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u307e\u3057\u305f\u3002Vyatta \u793e\u304c\u7c73 Brocade \u793e\u306b\u3088\u3063\u3066\u8cb7\u53ce\u3055\u308c\u305f\u5f8c\u3001\u7121\u511f\u7248\u306e\u958b\u767a\u306f\u4e2d\u6b62\u3055\u308c\u3001\u305d\u306e\u7121\u511f\u7248 Vyatta \u304b\u3089\u5206\u5c90\u3057\u305f VyOS \u306e\u958b\u767a\u304c\u59cb\u307e\u308a\u307e\u3057\u305f\u3002<\/p>\n<p>SoftLayer \u3067\u306f\u4eee\u60f3\u30b5\u30fc\u30d0\u306e OS \u306b\u7121\u511f\u7248\u306e Vyatta \u3092\u9078\u629e\u3057\u3001\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bf\u3068\u3057\u3066\u6d3b\u7528\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u306a\u304a\u3001SoftLayer \u3067\u306f\u7121\u511f\u7248\u306e Vyatta \u4ee5\u5916\u306b\u3001Brocade \u793e\u306b\u3088\u308b\u6709\u511f\u7248\u306e Vyatta \u306e\u5229\u7528\u3082\u3067\u304d\u307e\u3059\u3002\u3053\u3061\u3089\u306f HA \u69cb\u6210\u306a\u3069\u304c\u53ef\u80fd\u306a\u30d9\u30a2\u30e1\u30bf\u30eb\u30b5\u30fc\u30d0\u3067\u3059\u304c\u3084\u3084\u9ad8\u4fa1\u3067\u3042\u308b\u305f\u3081\u3001IPsec VPN \u81ea\u4f53\u306e\u691c\u8a3c\u3092\u76ee\u7684\u3068\u3059\u308b\u672c\u9805\u3067\u53d6\u308a\u6271\u3044\u307e\u305b\u3093\u3002<\/p>\n<h2>IPsec VPN \u3068\u306f<\/h2>\n<p>SoftLayer \u304c\u63d0\u4f9b\u3057\u3066\u3044\u308b <a href=\"http:\/\/knowledgelayer.softlayer.com\/topic\/vpn\">VPN<\/a> \u306b\u306f\u3055\u307e\u3056\u307e\u306a\u30d7\u30ed\u30c8\u30b3\u30eb\u304c\u3042\u308a\u3001\u305d\u306e\u3046\u3061\u7121\u6599\u3067\u5229\u7528\u3067\u304d\u308b VPN \u3068\u3057\u3066 SSL-VPN \u3068 PPTP-VPN \u304c\u3042\u308a\u307e\u3059\u3002\u3069\u3061\u3089\u3082\u6697\u53f7\u5316 VPN \u30c8\u30f3\u30cd\u30eb\u3092\u4ecb\u3057\u3066 SoftLayer \u306e\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306b\u63a5\u7d9a\u3057\u3001\u30b5\u30fc\u30d0\u306e\u7ba1\u7406\u3092\u884c\u3046\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>\u3057\u304b\u3057\u3001SSL-VPN \u306f\u30d6\u30e9\u30a6\u30b6\u30d9\u30fc\u30b9\u3067\u3042\u308b\u305f\u3081\u30ea\u30e2\u30fc\u30c8\u30a2\u30af\u30bb\u30b9\u7528\u9014\u3068\u3044\u3046\u5074\u9762\u304c\u5f37\u304f\u3001PPTP-VPN \u3082\u5143\u3005\u306f\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3068\u30b5\u30fc\u30d0\u306e\u63a5\u7d9a\u306b\u8003\u6848\u3055\u308c\u305f\u5f62\u614b\u306e\u305f\u3081\u3001\u62e0\u70b9\u9593\u63a5\u7d9a\u306b\u306f\u90fd\u5408\u304c\u60aa\u3044\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<p>IPsec VPN \u306f\u30eb\u30fc\u30bf\u540c\u58eb\u3092 IPsec \u3067\u6697\u53f7\u5316\u63a5\u7d9a\u3059\u308b\u5f62\u614b\u3067\u3001\u62e0\u70b9\u9593\u63a5\u7d9a\u306b\u7279\u5316\u3057\u305f\u65b9\u5f0f\u3068\u8a00\u3048\u307e\u3059\u3002SoftLayer \u3067\u3082 <a href=\"http:\/\/knowledgelayer.softlayer.com\/topic\/ipsec-vpn\">IPsec VPN<\/a> \u3092\u63d0\u4f9b\u3057\u3066\u3044\u307e\u3059\u3002\u3057\u304b\u3057\u3001<a href=\"http:\/\/w3.insidepacket.net\/index.php\/16-softlayer-ipsec-4\">Question about SoftLayer Standard IPSec offering<\/a> \u306b\u3088\u308b\u3068\u3001\u3053\u306e SoftLayer \u6a19\u6e96\u306e IPsec \u306f\u3042\u304f\u307e\u3067\u3082\u30b5\u30fc\u30d0\u306e\u7ba1\u7406\u7528\u3067\u3001\u5b9f\u969b\u306e\u62e0\u70b9\u9593\u63a5\u7d9a\u306b\u306f\u5411\u304b\u306a\u3044\u3068\u306e\u8a18\u8f09\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<blockquote>\n<p>The customer uses Softlayer Standard IPSec (the one in customer portal) as the communication path of app integration. But they saw some issue with that.The technical guy on customer end did some troubleshooting and found source NAT is performed on Softlayer VPN gateway.<\/p>\n<\/blockquote>\n<blockquote>\n<p>SoftLayer Standard IPSec offering in customer portal is for admin\/management purpose only. It is not really for application integration, .e.g. customer VM to server on their corporate network.<\/p>\n<\/blockquote>\n<p>\u305d\u3053\u3067\u3001\u5f53\u8a72\u30d6\u30ed\u30b0\u3067\u3082\u63a8\u5968\u3055\u308c\u3066\u3044\u308b\u901a\u308a\u3001\u672c\u9805\u3067\u306f\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bf\u306e Vyatta \u304a\u3088\u3073 VyOS \u3092\u7528\u3044\u3066 SoftLayer \u3068\u30aa\u30d5\u30a3\u30b9\u3092 IPsec VPN \u3067\u63a5\u7d9a\u3057\u3066\u307f\u307e\u3059\u3002<\/p>\n<h2>\u524d\u63d0\u3068\u3059\u308b\u691c\u8a3c\u74b0\u5883<\/h2>\n<p>SoftLayer \u3068\u30aa\u30d5\u30a3\u30b9\u305d\u308c\u305e\u308c\u306e IPsec VPN \u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u306f\u3001\u7121\u511f\u7248 Vyatta \u304a\u3088\u3073 VyOS \u3092\u7528\u3044\u3066\u691c\u8a3c\u3092\u884c\u3044\u307e\u3059\u3002SoftLayer \u5074\u3092\u6709\u511f\u7248 Vyatta \u306b\u7f6e\u304d\u63db\u3048\u3001\u30aa\u30d5\u30a3\u30b9\u5074\u3092 VyOS \u3084 Vyatta \u3068\u901a\u4fe1\u53ef\u80fd\u306a\u30eb\u30fc\u30bf\u306b\u7f6e\u304d\u63db\u3048\u3066\u3082\u52d5\u4f5c\u3059\u308b\u3068\u601d\u308f\u308c\u307e\u3059\u3002<\/p>\n<p>\u30aa\u30d5\u30a3\u30b9\u306f\u30d6\u30ed\u30fc\u30c9\u30d0\u30f3\u30c9\u30eb\u30fc\u30bf\u3092\u4ecb\u3057\u3066\u4e0d\u5b9a\u306e IP \u30a2\u30c9\u30ec\u30b9\u3067\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u306b\u63a5\u7d9a\u3057\u3066\u304a\u308a\u3001KVM \u30db\u30b9\u30c8\u4e0a\u306e\u4eee\u60f3\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306b VyOS \u3092\u914d\u7f6e\u3057\u307e\u3059\u3002<\/p>\n<p><img decoding=\"async\" src=\"\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2014\/07\/softlayer-vyos-1.png\" alt=\"softlayer-vyos-1\"><\/p>\n<h3>\u30aa\u30d5\u30a3\u30b9\u5074<\/h3>\n<p><strong>\u30d6\u30ed\u30fc\u30c9\u30d0\u30f3\u30c9\u30eb\u30fc\u30bf<\/strong><br \/>\n\u30b0\u30ed\u30fc\u30d0\u30eb\u5074: xxx.xxx.xxx.xxx<br \/>\n\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u5074: 192.168.24.1<\/p>\n<p><strong>\u30aa\u30d5\u30a3\u30b9\u5185 LAN<\/strong><br \/>\n\u30cd\u30c3\u30c8\u30ef\u30fc\u30af: 192.168.24.0\/24<br \/>\n\u30c7\u30d5\u30a9\u30eb\u30c8\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4: 192.168.24.1 (\u30d6\u30ed\u30fc\u30c9\u30d0\u30f3\u30c9\u30eb\u30fc\u30bf)<\/p>\n<p><strong>KVM \u30db\u30b9\u30c8<\/strong><br \/>\n\u30aa\u30d5\u30a3\u30b9\u5185 LAN \u5074: 192.168.24.201<br \/>\n\u4eee\u60f3\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5074: 192.168.122.1<\/p>\n<p><strong>\u4eee\u60f3\u30cd\u30c3\u30c8\u30ef\u30fc\u30af<\/strong><br \/>\n\u30cd\u30c3\u30c8\u30ef\u30fc\u30af: 192.168.122.0\/24<br \/>\n\u30c7\u30d5\u30a9\u30eb\u30c8\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4: 192.168.122.1 (KVM \u30db\u30b9\u30c8)<\/p>\n<p><strong>\u30af\u30e9\u30a4\u30a2\u30f3\u30c8PC (Ubuntu 12.04 LTS)<\/strong><br \/>\n\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u5074: 192.168.100.101 (eth1 \u306e\u307f)<\/p>\n<p><strong>VyOS (1.0.4)<\/strong><br \/>\n\u4eee\u60f3\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5074: 192.168.122.10<br \/>\n\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u5074: 192.168.100.10<\/p>\n<h3>SoftLayer \u5074<\/h3>\n<p><strong>Vyatta (6.6 Community Edition)<\/strong><br \/>\n\u30b0\u30ed\u30fc\u30d0\u30eb\u5074: 119.XXX.XXX.243 (eth1)<br \/>\n\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u5074: 10.110.42.196 (eth0)<\/p>\n<p><strong>\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af<\/strong><br \/>\n\u30cd\u30c3\u30c8\u30ef\u30fc\u30af: 10.110.42.192\/26<\/p>\n<p><strong>\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af<\/strong><br \/>\n\u30cd\u30c3\u30c8\u30ef\u30fc\u30af: 10.110.42.192\/26<\/p>\n<p><strong>\u30b5\u30fc\u30d0PC (CentOS 6 Minimal Install)<\/strong><br \/>\n\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u5074: 10.110.43.197 (eth0 \u306e\u307f)<\/p>\n<h2>\u30aa\u30d5\u30a3\u30b9\u5074 VyOS \u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3068\u8a2d\u5b9a<\/h2>\n<p>VyOS \u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u306f\u516c\u5f0f\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u306e <a href=\"http:\/\/vyos.net\/wiki\/User_Guide#Installation\">Installation<\/a> (<a href=\"http:\/\/wiki.vyos-users.jp\/%E3%83%A6%E3%83%BC%E3%82%B6%E3%83%BC%E3%82%AC%E3%82%A4%E3%83%89#.E3.82.A4.E3.83.B3.E3.82.B9.E3.83.88.E3.83.BC.E3.83.AB\">\u65e5\u672c\u8a9e<\/a>) \u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u672c\u9805\u3067\u306f\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u306b\u3042\u308b\u3088\u3046\u306b\u307b\u307c\u30c7\u30d5\u30a9\u30eb\u30c8\u8a2d\u5b9a\u3067\u9032\u3081\u305f\u3053\u3068\u3092\u524d\u63d0\u3068\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u304c\u5b8c\u4e86\u3057\u305f\u3089\u3001\u516c\u5f0f\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u306e <a href=\"http:\/\/vyos.net\/wiki\/User_Guide#Quick_Start_Guide\">Quick Start Guide<\/a> (<a href=\"http:\/\/wiki.vyos-users.jp\/%E3%83%A6%E3%83%BC%E3%82%B6%E3%83%BC%E3%82%AC%E3%82%A4%E3%83%89#.E3.82.AF.E3.82.A4.E3.83.83.E3.82.AF.E3.82.B9.E3.82.BF.E3.83.BC.E3.83.88.E3.82.AC.E3.82.A4.E3.83.89\">\u65e5\u672c\u8a9e\u7248<\/a>) \u3092\u53c2\u7167\u3057\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u8a2d\u5b9a\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos$ configure\n[edit]\nvyos@vyos#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# show interfaces\nethernet eth0 {\nhw-id xx:xx:xx:xx:xx:xx\n}\nethernet eth1 {\nhw-id yy:yy:yy:yy:yy:yy\n}\nloopback lo {\n}\n[edit]\nvyos@vyos#<\/pre>\n<p>IP\u30a2\u30c9\u30ec\u30b9\u3092\u8a2d\u5b9a\u3057\u307e\u3059\u3002\u5148\u306e\u524d\u63d0\u3068\u3059\u308b\u74b0\u5883\u304b\u3089 eth0 \u306f <strong>192.168.122.10<\/strong>\u3001eth1 \u306f <strong>192.168.100.10<\/strong> \u3068\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set interfaces ethernet eth0 address '192.168.122.10\/24'\n[edit]\nvyos@vyos# set interfaces ethernet eth0 description 'OUTSIDE'\n[edit]\nvyos@vyos# set interfaces ethernet eth1 address '192.168.100.10\/24'\n[edit]\nvyos@vyos# set interfaces ethernet eth1 description 'INSIDE'\n[edit]\nvyos@vyos#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"diff\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# show interfaces\nethernet eth0 {\n+ address 192.168.122.10\/24\n+ description OUTSIDE\nhw-id xx:xx:xx:xx:xx:xx\n}\nethernet eth1 {\n+ address 192.168.100.10\/24\n+ description INSIDE\nhw-id yy:yy:yy:yy:yy:yy\n}\nloopback lo {\n}\n[edit]\nvyos@vyos#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# commit\n[edit]\nvyos@vyos#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# show interfaces\nethernet eth0 {\naddress 192.168.122.10\/24\ndescription OUTSIDE\nhw-id xx:xx:xx:xx:xx:xx\n}\nethernet eth1 {\naddress 192.168.100.10\/24\ndescription INSIDE\nhw-id yy:yy:yy:yy:yy:yy\n}\nloopback lo {\n}\n[edit]\nvyos@vyos#<\/pre>\n<p>\u30c7\u30d5\u30a9\u30eb\u30c8\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u3092\u8a2d\u5b9a\u3057\u307e\u3059\u3002\u5148\u306e\u524d\u63d0\u3068\u3059\u308b\u74b0\u5883\u304b\u3089 <strong>192.168.122.1<\/strong> \u3068\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# show system gateway-address\nConfiguration under specified path is empty\n[edit]\nvyos@vyos#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set system gateway-address 192.168.122.1\n[edit]\nvyos@vyos#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"diff\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# show system gateway-address\n+gateway-address 192.168.122.1\n[edit]\nvyos@vyos#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# commit\n[edit]\nvyos@vyos#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# show system gateway-address\ngateway-address 192.168.122.1\n[edit]\nvyos@vyos#<\/pre>\n<p>eth1 \u5074\u306b NAT \u3092\u8a2d\u5b9a\u3057\u307e\u3059\u3002\u30af\u30e9\u30a4\u30a2\u30f3\u30c8PC\u3092 VyOS \u306e eth1 \u5074\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u304b\u3089\u901a\u4fe1\u3055\u305b\u308b\u305f\u3081\u3067\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# show nat\nConfiguration under specified path is empty\n[edit]\nvyos@vyos#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set nat source rule 100 outbound-interface 'eth0'\n[edit]\nvyos@vyos# set nat source rule 100 source address '192.168.100.0\/24'\n[edit]\nvyos@vyos# set nat source rule 100 translation address 'masquerade'\n[edit]\nvyos@vyos#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"diff\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# show nat\n+source {\n+ rule 100 {\n+ outbound-interface eth0\n+ source {\n+ address 192.168.100.0\/24\n+ }\n+ translation {\n+ address masquerade\n+ }\n+ }\n+}\n[edit]\nvyos@vyos#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# commit\n[edit]\nvyos@vyos#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# show nat\nsource {\nrule 100 {\noutbound-interface eth0\nsource {\naddress 192.168.100.0\/24\n}\ntranslation {\naddress masquerade\n}\n}\n}\n[edit]\nvyos@vyos#<\/pre>\n<p>\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u64cd\u4f5c\u3067\u304d\u308b\u3088\u3046\u306b SSH \u30b5\u30fc\u30d0\u309222\/tcp\u3067\u8d77\u52d5\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set service ssh port '22'\n[edit]\nvyos@vyos#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# commit\n[ service ssh ]\nRestarting OpenBSD Secure Shell server: sshd.\n[edit]\nvyos@vyos#<\/pre>\n<p>\u8a2d\u5b9a\u3092\u4fdd\u5b58\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# save\nSaving configuration to '\/config\/config.boot'...\nDone\n[edit]\nvyos@vyos#<\/pre>\n<p>\u4ee5\u964d\u3053\u306e VyOS \u306b\u306f\u30ea\u30e2\u30fc\u30c8\u304b\u3089 SSH \u63a5\u7d9a\u3057\u3066\u4f5c\u696d\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"shell\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">% ssh vyos@192.168.122.10\nWelcome to VyOS\nvyos@192.168.122.10's password:\nLinux vyatta 3.3.8-1-amd64-vyatta #1 SMP Wed Oct 30 22:54:40 CET 2013 x86_64\nWelcome to VyOS.\nThis system is open-source software. The exact distribution terms for\neach module comprising the full system are described in the individual\nfiles in \/usr\/share\/doc\/*\/copyright.\nLast login: Thu Jul  3 08:23:57 2014 from 192.168.122.1\nvyos@vyos:~$<\/pre>\n<h2>\u30af\u30e9\u30a4\u30a2\u30f3\u30c8PC\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3068\u8a2d\u5b9a<\/h2>\n<p>\u30af\u30e9\u30a4\u30a2\u30f3\u30c8PC\u3068\u306a\u308b\u4eee\u60f3\u30b5\u30fc\u30d0\u306b\u306f Ubuntu 12.04 LTS \u3092\u7528\u3044\u307e\u3059\u3002<\/p>\n<p>IP\u30a2\u30c9\u30ec\u30b9\u3068\u30c7\u30d5\u30a9\u30eb\u30c8\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u3092\u8a2d\u5b9a\u3057\u307e\u3059\u3002\u5148\u306e\u524d\u63d0\u3068\u3059\u308b\u74b0\u5883\u304b\u3089 eth0 \u306f\u7528\u3044\u305a\u3001eth1 \u3092 <strong>192.168.100.101<\/strong>\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u306f <strong>192.168.100.10<\/strong> (VyOS \u306e eth1 \u5074) \u3068\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">ubuntu@ubuntu:~$ cat \/etc\/network\/interfaces\n# This file describes the network interfaces available on your system\n# and how to activate them. For more information, see interfaces(5).\n\n# The loopback network interface\nauto lo\niface lo inet loopback\n\n# The primary network interface\nauto eth0\n\n# The secondary network interface\nauto eth1\niface eth1 inet static\naddress\t\t192.168.100.101\nnetmask\t\t255.255.255.0\nbroadcast\t192.168.100.255\ngateway\t\t192.168.100.10\nubuntu@ubuntu:~$<\/pre>\n<h2>\u30aa\u30d5\u30a3\u30b9\u5074 VyOS \u306e IPsec VPN \u8a2d\u5b9a<\/h2>\n<p>IPsec \u306e\u63a5\u7d9a\u3092\u78ba\u7acb\u306b\u306f\u3044\u304f\u3064\u3082\u306e\u6bb5\u968e\u3092\u8e0f\u307f\u307e\u3059\u304c\u3001\u3053\u3053\u3067\u306f\u7701\u7565\u3057\u307e\u3059\u3002\u307e\u305f\u3001IPsec \u306e\u7528\u8a9e\u306b\u3064\u3044\u3066\u3082\u8a73\u3057\u3044\u8aac\u660e\u306f\u7701\u304d\u307e\u3059\u3002\u8a73\u7d30\u306f IPsec \u306e\u5c02\u9580\u66f8\u7b49\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<p>\u307e\u305a IPsec \u3092\u6709\u52b9\u306b\u3059\u308b\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30a4\u30b9\u3092 VyOS \u306e\u30d1\u30d6\u30ea\u30c3\u30af\u5074\u306e <strong>eth0<\/strong> \u306b\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set vpn ipsec ipsec-interfaces interface eth0\n[edit]\nvyos@vyos#<\/pre>\n<p>NAT \u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u3092\u6709\u52b9\u306b\u3057\u307e\u3059\u3002\u8a31\u53ef\u3059\u308b\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306f SoftLayer \u306e\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af <strong>10.110.42.192\/26<\/strong> \u3067\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set vpn ipsec nat-traversal enable\n[edit]\nvyos@vyos# set vpn ipsec nat-networks allowed-network 10.110.42.192\/26\n[edit]\nvyos@vyos#<\/pre>\n<h3>IKE \u3068 ESP \u306e\u8a2d\u5b9a<\/h3>\n<p>IKE (Internet Key Exchange) \u306e\u30b0\u30eb\u30fc\u30d7\u540d\u3092 <strong>IKE-1-EAST<\/strong> \u3068\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set vpn ipsec ike-group IKE-1-EAST\n[edit]\nvyos@vyos#<\/pre>\n<p>1\u3064\u76ee\u306e Proposal (\u63d0\u6848) \u306f\u6697\u53f7\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u3092 <strong>aes256<\/strong>\u3001\u30cf\u30c3\u30b7\u30e5\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u3092 <strong>sha1<\/strong> \u3068\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set vpn ipsec ike-group IKE-1-EAST proposal 1 encryption aes256\n[edit]\nvyos@vyos# set vpn ipsec ike-group IKE-1-EAST proposal 1 hash sha1\n[edit]\nvyos@vyos#<\/pre>\n<p>2\u3064\u76ee\u306e Proposal \u306f <strong>aes128<\/strong>\u3001<strong>sha1<\/strong> \u3068\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set vpn ipsec ike-group IKE-1-EAST proposal 2 encryption aes128\n[edit]\nvyos@vyos# set vpn ipsec ike-group IKE-1-EAST proposal 2 hash sha1\n[edit]\nvyos@vyos#<\/pre>\n<p>IKE \u306e lifetime \u306f <strong>3600<\/strong> \u3068\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set vpn ipsec ike-group IKE-1-EAST lifetime 3600\n[edit]\nvyos@vyos#<\/pre>\n<p>ESP (Encapsulated Security Payload) \u306e\u30b0\u30eb\u30fc\u30d7\u540d\u3092 <strong>ESP-1-EAST<\/strong> \u3068\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set vpn ipsec esp-group ESP-1-EAST\n[edit]\nvyos@vyos#<\/pre>\n<p>ESP \u306e Proposal \u306f IKE \u3068\u540c\u69d8\u306b\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set vpn ipsec esp-group ESP-1-EAST proposal 1 encryption aes256\n[edit]\nvyos@vyos# set vpn ipsec esp-group ESP-1-EAST proposal 1 hash sha1\n[edit]\nvyos@vyos#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set vpn ipsec esp-group ESP-1-EAST proposal 2 encryption aes128\n[edit]\nvyos@vyos# set vpn ipsec esp-group ESP-1-EAST proposal 2 hash sha1\n[edit]\nvyos@vyos#<\/pre>\n<p>ESP \u306e lifetime \u306f <strong>3600<\/strong> \u3068\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set vpn ipsec esp-group ESP-1-EAST lifetime 3600\n[edit]\nvyos@vyos#<\/pre>\n<h3>\u30d4\u30a2\u30ea\u30f3\u30b0\u306e\u8a2d\u5b9a<\/h3>\n<p>SoftLayer \u5074\u306e Vyatta \u3068\u63a5\u7d9a\u3059\u308b\u305f\u3081\u306e\u8a2d\u5b9a\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n<p>\u63a5\u7d9a\u5148\u306b SoftLayer \u5074\u306e Vyatta \u306e\u30d1\u30d6\u30ea\u30c3\u30af IP \u30a2\u30c9\u30ec\u30b9 <strong>119.XXX.XXX.243<\/strong> \u3092\u6307\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set vpn ipsec site-to-site peer 119.XXX.XXX.243\n[edit]\nvyos@vyos#<\/pre>\n<p>\u8a8d\u8a3c\u30e2\u30fc\u30c9\u306b\u4e8b\u524d\u5171\u6709\u79d8\u5bc6 (<strong>pre-shared-secret<\/strong>) \u65b9\u5f0f\u3092\u6307\u5b9a\u3057\u3001\u4e8b\u524d\u5171\u6709\u79d8\u5bc6\u3068\u3057\u3066\u4efb\u610f\u306e\u6587\u5b57\u5217\u3092\u8a2d\u5b9a\u3057\u307e\u3059\u3002\u4e8b\u524d\u5171\u6709\u79d8\u5bc6\u306e\u6587\u5b57\u5217\u306f\u30d4\u30a2\u30ea\u30f3\u30b0\u3059\u308b\u4e21\u8005\u3067\u4e00\u81f4\u3057\u3066\u3044\u306a\u3051\u308c\u3070\u3044\u3051\u307e\u305b\u3093\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set vpn ipsec site-to-site peer 119.XXX.XXX.243 authentication mode pre-shared-secret\n[edit]\nvyos@vyos# set vpn ipsec site-to-site peer 119.XXX.XXX.243 authentication pre-shared-secret PRE_SHARED_SECRET\n[edit]\nvyos@vyos#<\/pre>\n<p>\u5148\u306b\u8a2d\u5b9a\u3057\u305f <strong>ESP-1-EAST<\/strong> \u3068 <strong>IKE-1-EAST<\/strong> \u3092\u305d\u308c\u305e\u308c\u6307\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set vpn ipsec site-to-site peer 119.XXX.XXX.243 default-esp-group ESP-1-EAST\n[edit]\nvyos@vyos# set vpn ipsec site-to-site peer 119.XXX.XXX.243 ike-group IKE-1-EAST\n[edit]\nvyos@vyos#<\/pre>\n<p>\u30aa\u30d5\u30a3\u30b9\u306e VyOS \u306e\u30d1\u30d6\u30ea\u30c3\u30af\u5074\u306e IP \u30a2\u30c9\u30ec\u30b9 <strong>192.168.122.10<\/strong> \u3092\u6307\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set vpn ipsec site-to-site peer 119.XXX.XXX.243 local-address 192.168.122.10\n[edit]\nvyos@vyos#<\/pre>\n<p>\u30c8\u30f3\u30cd\u30eb\u306e\u30ed\u30fc\u30ab\u30eb\u5074\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306f\u30aa\u30d5\u30a3\u30b9\u306e\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a2\u30c9\u30ec\u30b9 <strong>192.168.122.0\/24<\/strong> \u3092\u3001\u30ea\u30e2\u30fc\u30c8\u5074\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306f SoftLayer \u306e\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a2\u30c9\u30ec\u30b9 <strong>10.110.42.192\/26<\/strong> \u3092\u6307\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set vpn ipsec site-to-site peer 119.XXX.XXX.243 tunnel 1 local prefix 192.168.122.0\/24\n[edit]\nvyos@vyos# set vpn ipsec site-to-site peer 119.XXX.XXX.243 tunnel 1 remote prefix 10.110.42.192\/26\n[edit]\nvyos@vyos#<\/pre>\n<h3>\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306e\u8a2d\u5b9a<\/h3>\n<p>\u30aa\u30d5\u30a3\u30b9\u306e\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3068\u3001SoftLayer \u5074 Vyatta \u306e\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306e\u307f\u3092\u8a31\u53ef\u3059\u308b\u3088\u3046\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set firewall name office-fw\n[edit]\nvyos@vyos# set firewall name office-fw default-action drop\n[edit]\nvyos@vyos# set firewall name office-fw enable-default-log\n[edit]\nvyos@vyos# set firewall name office-fw rule 100 action accept\n[edit]\nvyos@vyos# set firewall name office-fw rule 100 source address 192.168.0.0\/16\n[edit]\nvyos@vyos# set firewall name office-fw rule 200 action accept\n[edit]\nvyos@vyos# set firewall name office-fw rule 200 source address 119.XXX.XXX.243\n[edit]\nvyos@vyos#<\/pre>\n<p>\u78ba\u7acb\u3057\u305f\u30bb\u30c3\u30b7\u30e7\u30f3\u3068\u95a2\u4fc2\u3059\u308b\u30bb\u30c3\u30b7\u30e7\u30f3\u3092\u8a31\u53ef\u3059\u308b\u3088\u3046\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set firewall state-policy established action accept\n[edit]\nvyos@vyos# set firewall state-policy related action accept\n[edit]\nvyos@vyos#<\/pre>\n<p>\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306e\u30eb\u30fc\u30eb\u3092 <strong>eth0<\/strong> \u306b\u9069\u7528\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# set interfaces ethernet eth0 firewall local name office-fw\n[edit]\nvyos@vyos#<\/pre>\n<p>\u8a2d\u5b9a\u3092\u53cd\u6620\u3057\u3066\u4fdd\u5b58\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# commit\n[edit]\nvyos@vyos# save\nSaving configuration to '\/config\/config.boot'...\nDone\n[edit]\nvyos@vyos#<\/pre>\n<h3>\u8a2d\u5b9a\u78ba\u8a8d<\/h3>\n<p>\u30aa\u30d5\u30a3\u30b9\u5074 VyOS \u306e IPsec VPN \u8a2d\u5b9a\u3068\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u8a2d\u5b9a\u306f\u6b21\u306e\u901a\u308a\u3067\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# show vpn\nipsec {\nesp-group ESP-1-EAST {\ncompression disable\nlifetime 3600\nmode tunnel\npfs enable\nproposal 1 {\nencryption aes256\nhash sha1\n}\nproposal 2 {\nencryption aes128\nhash sha1\n}\n}\nike-group IKE-1-EAST {\nlifetime 3600\nproposal 1 {\nencryption aes256\nhash sha1\n}\nproposal 2 {\nencryption aes128\nhash sha1\n}\n}\nipsec-interfaces {\ninterface eth0\n}\nnat-networks {\nallowed-network 10.110.42.192\/26 {\n}\n}\nnat-traversal enable\nsite-to-site {\npeer 119.XXX.XXX.243 {\nauthentication {\nmode pre-shared-secret\npre-shared-secret PRE_SHARED_SECRET\n}\ndefault-esp-group ESP-1-EAST\nike-group IKE-1-EAST\nlocal-address 192.168.122.10\ntunnel 1 {\nlocal {\nprefix 192.168.122.0\/24\n}\nremote {\nprefix 10.110.42.192\/26\n}\n}\n}\n}\n}\n[edit]\nvyos@vyos#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# show firewall\nname office-fw {\ndefault-action drop\nenable-default-log\nrule 100 {\naction accept\nsource {\naddress 192.168.0.0\/16\n}\n}\nrule 200 {\naction accept\nsource {\naddress 119.XXX.XXX.243\n}\n}\n}\nstate-policy {\nestablished {\naction accept\n}\nrelated {\naction accept\n}\n}\n[edit]\nvyos@vyos#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos# show interfaces ethernet eth0\naddress 192.168.122.10\/24\ndescription OUTSIDE\nduplex auto\nfirewall {\nlocal {\nname office-fw\n}\n}\nhw-id 52:54:00:e0:0d:df\nsmp_affinity auto\nspeed auto\n[edit]\nvyos@vyos#<\/pre>\n<h2>SoftLayer \u5074 Vyatta \u306e IPsec VPN \u8a2d\u5b9a<\/h2>\n<p>\u30aa\u30d5\u30a3\u30b9\u5074\u306e VyOS \u3068\u540c\u69d8\u3001SoftLayer \u5074\u306e Vyatta \u306e\u8a2d\u5b9a\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n<p>IPsec \u3092\u6709\u52b9\u306b\u3059\u308b\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30a4\u30b9\u3092 Vyatta \u306e\u30d1\u30d6\u30ea\u30c3\u30af\u5074\u306e <strong>eth1<\/strong> \u306b\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set vpn ipsec ipsec-interfaces interface eth1\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<p>NAT \u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u3092\u6709\u52b9\u306b\u3057\u307e\u3059\u3002\u8a31\u53ef\u3059\u308b\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306f\u30aa\u30d5\u30a3\u30b9\u306e\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a2\u30c9\u30ec\u30b9 <strong>192.168.122.0\/24<\/strong> \u3067\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set vpn ipsec nat-traversal enable\n[edit]\nvyatta@vyatta-sl# set vpn ipsec nat-networks allowed-network 192.168.122.0\/24\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<h3>IKE \u3068 ESP \u306e\u8a2d\u5b9a<\/h3>\n<p>\u30b0\u30eb\u30fc\u30d7\u540d\u4ee5\u5916\u306e\u8a2d\u5b9a\u306f\u3001\u30d4\u30a2\u30ea\u30f3\u30b0\u3059\u308b\u4e21\u8005\u3067\u4e00\u81f4\u3057\u3066\u3044\u306a\u3051\u308c\u3070\u3044\u3051\u307e\u305b\u3093\u3002<\/p>\n<p>IKE \u306e\u30b0\u30eb\u30fc\u30d7\u540d\u3092 <strong>IKE-1-WEST<\/strong> \u3068\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set vpn ipsec ike-group IKE-1-WEST\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<p>1\u3064\u76ee\u306e Proposal \u306f\u6697\u53f7\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u3092 <strong>aes256<\/strong>\u3001\u30cf\u30c3\u30b7\u30e5\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u3092 <strong>sha1<\/strong> \u3068\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set vpn ipsec ike-group IKE-1-WEST proposal 1 encryption aes256\n[edit]\nvyatta@vyatta-sl# set vpn ipsec ike-group IKE-1-WEST proposal 1 hash sha1\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<p>2\u3064\u76ee\u306e Proposal \u306f <strong>aes128<\/strong>\u3001<strong>sha1<\/strong> \u3068\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set vpn ipsec ike-group IKE-1-WEST proposal 2 encryption aes128\n[edit]\nvyatta@vyatta-sl# set vpn ipsec ike-group IKE-1-WEST proposal 2 hash sha1\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<p>IKE \u306e lifetime \u306f <strong>3600<\/strong> \u3068\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set vpn ipsec ike-group IKE-1-WEST lifetime 3600\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<p>ESP \u306e\u30b0\u30eb\u30fc\u30d7\u540d\u3092 <strong>ESP-1-WEST<\/strong> \u3068\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set vpn ipsec esp-group ESP-1-WEST\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<p>ESP \u306e Proposal \u306f IKE \u3068\u540c\u69d8\u306b\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set vpn ipsec esp-group ESP-1-WEST proposal 1 encryption aes256\n[edit]\nvyatta@vyatta-sl# set vpn ipsec esp-group ESP-1-WEST proposal 1 hash sha1\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set vpn ipsec esp-group ESP-1-WEST proposal 2 encryption aes128\n[edit]\nvyatta@vyatta-sl# set vpn ipsec esp-group ESP-1-WEST proposal 2 hash sha1\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<p>ESP \u306e lifetime \u306f <strong>3600<\/strong> \u3068\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set vpn ipsec esp-group ESP-1-WEST lifetime 3600\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<h3>\u30d4\u30a2\u30ea\u30f3\u30b0\u306e\u8a2d\u5b9a<\/h3>\n<p>\u30aa\u30d5\u30a3\u30b9\u5074\u306e VyOS \u3068\u63a5\u7d9a\u3059\u308b\u305f\u3081\u306e\u8a2d\u5b9a\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n<p>\u30aa\u30d5\u30a3\u30b9\u5074\u306e VyOS \u306f\u30d6\u30ed\u30fc\u30c9\u30d0\u30f3\u30c9\u30eb\u30fc\u30bf\u306b\u3088\u308b\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u63a5\u7d9a\u306e\u305f\u3081\u3001IP \u30a2\u30c9\u30ec\u30b9\u304c\u4e0d\u5b9a\u3067\u3059\u3002\u3088\u3063\u3066\u3001\u4efb\u610f\u306e IP \u30a2\u30c9\u30ec\u30b9\u3092\u610f\u5473\u3059\u308b <strong>0.0.0.0<\/strong> \u3092\u6307\u5b9a\u3057\u307e\u3059\u3002\u3053\u306e\u5834\u5408\u3001\u30aa\u30d5\u30a3\u30b9\u5074\u306e VyOS \u304b\u3089 SoftLayer \u5074\u306e Vyatta \u306b\u5bfe\u3057\u3066\u63a5\u7d9a\u3092\u958b\u59cb\u3059\u308b\u5f62\u3068\u306a\u308a\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set vpn ipsec site-to-site peer 0.0.0.0\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<p>\u8a8d\u8a3c\u30e2\u30fc\u30c9\u306b <strong>pre-shared-secret<\/strong> \u65b9\u5f0f\u3092\u6307\u5b9a\u3057\u3001\u30aa\u30d5\u30a3\u30b9\u5074\u306e VyOS \u3067\u6307\u5b9a\u3057\u305f\u3082\u306e\u3068\u540c\u3058\u6587\u5b57\u5217\u3092\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set vpn ipsec site-to-site peer 0.0.0.0 authentication mode pre-shared-secret\n[edit]\nvyatta@vyatta-sl# set vpn ipsec site-to-site peer 0.0.0.0 authentication pre-shared-secret PRE_SHARED_SECRET\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<p>\u5148\u306b\u8a2d\u5b9a\u3057\u305f <strong>ESP-1-EAST<\/strong> \u3068 <strong>IKE-1-EAST<\/strong> \u3092\u305d\u308c\u305e\u308c\u6307\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set vpn ipsec site-to-site peer 0.0.0.0 default-esp-group ESP-1-WEST\n[edit]\nvyatta@vyatta-sl# set vpn ipsec site-to-site peer 0.0.0.0 ike-group IKE-1-WEST\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<p>SoftLayer \u306e Vyatta \u306e\u30d1\u30d6\u30ea\u30c3\u30af\u5074\u306e IP \u30a2\u30c9\u30ec\u30b9 <strong>119.XXX.XXX.243<\/strong> \u3092\u6307\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set vpn ipsec site-to-site peer 0.0.0.0 local-address 119.XXX.XXX.243\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<p>\u30c8\u30f3\u30cd\u30eb\u306e\u30ed\u30fc\u30ab\u30eb\u5074\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306f SoftLayer \u306e Vyatta \u306e\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u5074\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a2\u30c9\u30ec\u30b9 <strong>10.110.42.192\/26<\/strong> \u3092\u3001\u30ea\u30e2\u30fc\u30c8\u5074\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306f\u30aa\u30d5\u30a3\u30b9\u306e\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a2\u30c9\u30ec\u30b9 <strong>192.168.122.0\/24<\/strong> \u3092\u6307\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set vpn ipsec site-to-site peer 0.0.0.0 tunnel 1 local prefix 10.110.42.192\/26\n[edit]\nvyatta@vyatta-sl# set vpn ipsec site-to-site peer 0.0.0.0 tunnel 1 remote prefix 192.168.122.0\/24\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<h3>\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306e\u8a2d\u5b9a<\/h3>\n<p>\u304a\u4e92\u3044\u306e\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3068\u3001IPsec \u306e\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u307f\u3092\u8a31\u53ef\u3059\u308b\u3088\u3046\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set firewall name sl-fw\n[edit]\nvyatta@vyatta-sl# set firewall name sl-fw default-action drop\n[edit]\nvyatta@vyatta-sl# set firewall name sl-fw enable-default-log\n[edit]\nvyatta@vyatta-sl# set firewall name sl-fw rule 100 action accept\n[edit]\nvyatta@vyatta-sl# set firewall name sl-fw rule 100 source address 10.0.0.0\/8\n[edit]\nvyatta@vyatta-sl# set firewall name sl-fw rule 110 action accept\n[edit]\nvyatta@vyatta-sl# set firewall name sl-fw rule 110 source address 192.168.0.0\/16\n[edit]\nvyatta@vyatta-sl# set firewall name sl-fw rule 120 action accept\n[edit]\nvyatta@vyatta-sl# set firewall name sl-fw rule 120 destination port 500\n[edit]\nvyatta@vyatta-sl# set firewall name sl-fw rule 120 protocol udp\n[edit]\nvyatta@vyatta-sl# set firewall name sl-fw rule 130 action accept\n[edit]\nvyatta@vyatta-sl# set firewall name sl-fw rule 130 destination port 4500\n[edit]\nvyatta@vyatta-sl# set firewall name sl-fw rule 130 protocol udp\n[edit]\nvyatta@vyatta-sl# set firewall name sl-fw rule 140 action accept\n[edit]\nvyatta@vyatta-sl# set firewall name sl-fw rule 140 protocol esp\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<p>\u78ba\u7acb\u3057\u305f\u30bb\u30c3\u30b7\u30e7\u30f3\u3068\u95a2\u4fc2\u3059\u308b\u30bb\u30c3\u30b7\u30e7\u30f3\u3092\u8a31\u53ef\u3059\u308b\u3088\u3046\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set firewall state-policy established action accept\n[edit]\nvyatta@vyatta-sl# set firewall state-policy related action accept\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<p>\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306e\u30eb\u30fc\u30eb\u3092 <strong>eth1<\/strong> \u306b\u9069\u7528\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set interfaces ethernet eth1 firewall in name sl-fw\n[edit]\nvyatta@vyatta-sl# set interfaces ethernet eth1 firewall local name sl-fw\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<p>eth0 \u5074\u306b NAT \u3092\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# set nat source rule 10 outbound-interface eth0\n[edit]\nvyatta@vyatta-sl# set nat source rule 10 source address 192.168.0.0\/16\n[edit]\nvyatta@vyatta-sl# set nat source rule 10 translation address masquerade\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<p>\u8a2d\u5b9a\u3092\u53cd\u6620\u3057\u3066\u4fdd\u5b58\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# commit\n[edit]\nvyatta@vyatta-sl# save\nSaving configuration to '\/config\/config.boot'...\nDone\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<h3>\u8a2d\u5b9a\u78ba\u8a8d<\/h3>\n<p>SoftLayer \u5074 Vyatta \u306e IPsec VPN \u8a2d\u5b9a\u3068\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u8a2d\u5b9a\u306f\u6b21\u306e\u901a\u308a\u3067\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# show vpn\nipsec {\nesp-group ESP-1-WEST {\nlifetime 3600\nproposal 1 {\nencryption aes256\nhash sha1\n}\nproposal 2 {\nencryption aes128\nhash sha1\n}\n}\nike-group IKE-1-WEST {\nlifetime 3600\nproposal 1 {\nencryption aes256\nhash sha1\n}\nproposal 2 {\nencryption aes128\nhash sha1\n}\n}\nipsec-interfaces {\ninterface eth1\n}\nnat-networks {\nallowed-network 192.168.122.0\/24 {\n}\n}\nnat-traversal enable\nsite-to-site {\npeer 0.0.0.0 {\nauthentication {\nmode pre-shared-secret\npre-shared-secret PRE_SHARED_SECRET\n}\ndefault-esp-group ESP-1-WEST\nike-group IKE-1-WEST\nlocal-address 119.XXX.XXX.243\ntunnel 1 {\nlocal {\nprefix 10.110.42.192\/26\n}\nremote {\nprefix 192.168.122.0\/24\n}\n}\n}\n}\n}\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# show firewall\nname sl-fw {\ndefault-action drop\nenable-default-log\nrule 100 {\naction accept\nsource {\naddress 10.0.0.0\/8\n}\n}\nrule 110 {\naction accept\nsource {\naddress 192.168.0.0\/16\n}\n}\nrule 120 {\naction accept\ndestination {\nport 500\n}\nprotocol udp\n}\nrule 130 {\naction accept\ndestination {\nport 4500\n}\nprotocol udp\n}\nrule 140 {\naction accept\nprotocol esp\n}\n}\nstate-policy {\nestablished {\naction accept\n}\nrelated {\naction accept\n}\n}\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# show interfaces ethernet eth1\naddress 119.XXX.XXX.243\/28\nduplex auto\nfirewall {\nin {\nname sl-fw\n}\nlocal {\nname sl-fw\n}\n}\nhw-id 06:b1:db:d8:47:3f\nsmp_affinity auto\nspeed auto\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl# show nat\nsource {\nrule 10 {\noutbound-interface eth0\nsource {\naddress 192.168.0.0\/16\n}\ntranslation {\naddress masquerade\n}\n}\n}\n[edit]\nvyatta@vyatta-sl#<\/pre>\n<h2>\u63a5\u7d9a\u78ba\u8a8d<\/h2>\n<p>\u30aa\u30d5\u30a3\u30b9\u5074\u306e VyOS\u3001SoftLayer \u5074\u306e Vyatta \u306e\u305d\u308c\u305e\u308c\u3067 <strong>show vpn ike sa<\/strong> \u3092\u5b9f\u884c\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyos@vyos:~$ show vpn ike sa\nPeer ID \/ IP                            Local ID \/ IP\n------------                            -------------\n119.XXX.XXX.243                          192.168.122.10                         \n\nState Encrypt Hash D-H Grp NAT-T A-Time L-Time\n----- ------- ---- ------- ----- ------ ------\nup aes256 sha1 5 yes 1205 3600\nvyos@vyos:~$<\/pre>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">vyatta@vyatta-sl:~$ show vpn ike sa\nPeer ID \/ IP                            Local ID \/ IP\n------------                            -------------\nxxx.xxx.xxx.xxx                         119.XXX.XXX.243                         \n\nState Encrypt Hash D-H Grp NAT-T A-Time L-Time\n----- ------- ---- ------- ----- ------ ------\nup aes256 sha1 5 yes 1480 3600\nvyatta@vyatta-sl:~$<\/pre>\n<p>\u4e21\u65b9\u306e State \u304c <strong>up<\/strong> \u306b\u306a\u3063\u3066\u3044\u308c\u3070\u3001IPsec VPN \u63a5\u7d9a\u304c\u78ba\u7acb\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>\u30aa\u30d5\u30a3\u30b9\u5074\u306e\u30af\u30e9\u30a4\u30a2\u30f3\u30c8 PC \u306b\u30ed\u30b0\u30a4\u30f3\u3057\u3001SoftLayer \u5074\u306e\u30b5\u30fc\u30d0 PC \u306b\u5bfe\u3057\u3066 ping \u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3057\u3066\u307f\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"shell\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">ubuntu@ubuntu:~$ ping -c 4 10.110.43.197\nPING 10.110.43.197 (10.110.43.197) 56(84) bytes of data.\n64 bytes from 10.110.43.197: icmp_req=1 ttl=62 time=68.4 ms\n64 bytes from 10.110.43.197: icmp_req=2 ttl=62 time=68.6 ms\n64 bytes from 10.110.43.197: icmp_req=3 ttl=62 time=71.8 ms\n64 bytes from 10.110.43.197: icmp_req=4 ttl=62 time=68.5 ms\n\n--- 10.110.43.197 ping statistics ---\n4 packets transmitted, 4 received, 0% packet loss, time 3005ms\nrtt min\/avg\/max\/mdev = 68.464\/69.367\/71.892\/1.470 ms\nubuntu@ubuntu:~$<\/pre>\n<p>\u5fdc\u7b54\u304c\u3042\u308a\u307e\u3057\u305f\u3002traceroute \u30b3\u30de\u30f3\u30c9\u3067\u7d4c\u8def\u3092\u78ba\u8a8d\u3057\u3066\u307f\u307e\u3059\u3002<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"shell\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">ubuntu@ubuntu:~$ traceroute 10.110.43.197\ntraceroute to 10.110.43.197 (10.110.43.197), 30 hops max, 60 byte packets\n1  192.168.100.10 (192.168.100.10)  0.408 ms  0.400 ms  0.392 ms\n2  * * *\n3  10.110.43.197 (10.110.43.197)  69.073 ms  69.052 ms  69.061 ms\nubuntu@ubuntu:~$<\/pre>\n<p>\u30aa\u30d5\u30a3\u30b9\u3068 SoftLayer \u306e\u305d\u308c\u305e\u308c\u306e\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u304c IPsec VPN \u306b\u3088\u3063\u3066\u63a5\u7d9a\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3059\u3002<\/p>\n<h2>\u307e\u3068\u3081<\/h2>\n<p>\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bf\u306e Vyatta \u3068 VyOS \u3092\u7528\u3044\u3066\u3001SoftLayer\u3068\u30aa\u30d5\u30a3\u30b9\u3092 IPsec VPN \u3057\u3066\u307f\u307e\u3057\u305f\u3002\u305f\u3060\u3057\u3001\u73fe\u72b6\u3067\u306f\u5b9f\u969b\u306e\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u5229\u7528\u306a\u3069\u306f\u884c\u3063\u3066\u3044\u307e\u305b\u3093\u3002\u6b21\u306e\u8a18\u4e8b\u3067\u3055\u3089\u306b IPsec VPN \u306e\u5229\u7528\u306b\u3064\u3044\u3066\u898b\u3066\u3044\u304d\u307e\u3059\u3002<\/p>\n<h3>\u53c2\u8003\u6587\u732e<\/h3>\n<ul>\n<li><a href=\"http:\/\/www.infraexpert.com\/study\/study10.html\">IPsec\u3068\u306f<\/a><\/li>\n<li><a href=\"http:\/\/vyos.net\/wiki\/Main_Page\">VyOS Wiki<\/a><\/li>\n<li><a href=\"http:\/\/wiki.vyos-users.jp\/%E3%83%A1%E3%82%A4%E3%83%B3%E3%83%9A%E3%83%BC%E3%82%B8\">VyOS Wiki (\u65e5\u672c\u8a9e)<\/a><\/li>\n<li><a href=\"https:\/\/www.ibm.com\/developerworks\/community\/wikis\/home?lang=en#!\/wiki\/W2e55790226f1_47d0_a63b_84202b05783a\/page\/%E4%BB%AE%E6%83%B3%E3%83%AB%E3%83%BC%E3%82%BF%E3%83%BCVyatta%E3%82%92%E4%BD%BF%E3%81%A3%E3%81%A6%E3%80%81SoftLayer%E3%81%A8%E3%82%AA%E3%83%95%E3%82%A3%E3%82%B9%E3%82%92%E7%9B%B4%E7%B5%90%E3%81%99%E3%82%8B\">\u4eee\u60f3\u30eb\u30fc\u30bf\u30fcVyatta\u3092\u4f7f\u3063\u3066\u3001SoftLayer\u3068\u30aa\u30d5\u30a3\u30b9\u3092\u76f4\u7d50\u3059\u308b<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>VyOS \u3068\u306f VyOS \u3068\u306f\u3001\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u3067\u958b\u767a\u3055\u308c\u3066\u3044\u308b\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bf\u3067\u3059\u3002Debian GNU\/Linux \u3092\u30d9\u30fc\u30b9\u3068\u3057\u3001\u30eb\u30fc\u30bf\u3068\u3057\u3066\u52d5\u4f5c\u3059\u308b\u305f\u3081\u306e\u3055\u307e\u3056\u307e\u306a\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u3084\u7ba1\u7406\u7528\u306e\u30b3\u30de\u30f3\u30c9\u304c\u642d\u8f09\u3055\u308c\u3066\u3044\u307e\u3059\u3002 [&#8230;]<\/p>\n","protected":false},"author":2,"featured_media":5197,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"categories":[31,38],"tags":[],"class_list":["post-5191","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-higuchi","category-softlayer"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bfVyatta\u3068VyOS\u3092\u7528\u3044\u3066SoftLayer\u3068\u30aa\u30d5\u30a3\u30b9\u3092IPsec VPN\u63a5\u7d9a\u3059\u308b #softlayer - Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3<\/title>\n<meta name=\"description\" content=\"d-higuchi, softlayer |VyOS \u3068\u306f VyOS \u3068\u306f\u3001\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u3067\u958b\u767a\u3055\u308c\u3066\u3044\u308b\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bf\u3067\u3059\u3002Debian GNU\/Linux\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191\" \/>\n<meta property=\"og:locale\" content=\"ja_JP\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bfVyatta\u3068VyOS\u3092\u7528\u3044\u3066SoftLayer\u3068\u30aa\u30d5\u30a3\u30b9\u3092IPsec VPN\u63a5\u7d9a\u3059\u308b #softlayer - Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3\" \/>\n<meta property=\"og:description\" content=\"d-higuchi, softlayer |VyOS \u3068\u306f VyOS \u3068\u306f\u3001\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u3067\u958b\u767a\u3055\u308c\u3066\u3044\u308b\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bf\u3067\u3059\u3002Debian GNU\/Linux\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191\" \/>\n<meta property=\"og:site_name\" content=\"Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/creationline\" \/>\n<meta property=\"article:published_time\" content=\"2014-07-14T02:30:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-27T13:14:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2014\/07\/softlayer-vyos-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"803\" \/>\n\t<meta property=\"og:image:height\" content=\"306\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Daisuke Higuchi\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@creationline\" \/>\n<meta name=\"twitter:site\" content=\"@creationline\" \/>\n<meta name=\"twitter:label1\" content=\"\u57f7\u7b46\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"Daisuke Higuchi\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u63a8\u5b9a\u8aad\u307f\u53d6\u308a\u6642\u9593\" \/>\n\t<meta name=\"twitter:data2\" content=\"11\u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/softlayer\\\/5191#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/softlayer\\\/5191\"},\"author\":{\"name\":\"Daisuke Higuchi\",\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/#\\\/schema\\\/person\\\/16f1373831fb6fd17387f16ae1195206\"},\"headline\":\"\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bfVyatta\u3068VyOS\u3092\u7528\u3044\u3066SoftLayer\u3068\u30aa\u30d5\u30a3\u30b9\u3092IPsec VPN\u63a5\u7d9a\u3059\u308b #softlayer\",\"datePublished\":\"2014-07-14T02:30:49+00:00\",\"dateModified\":\"2026-05-27T13:14:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/softlayer\\\/5191\"},\"wordCount\":350,\"image\":{\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/softlayer\\\/5191#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cms_x3GWkuX\\\/wp-content\\\/uploads\\\/2014\\\/07\\\/softlayer-vyos-1.png\",\"articleSection\":[\"d-higuchi\",\"softlayer\"],\"inLanguage\":\"ja\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/softlayer\\\/5191\",\"url\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/softlayer\\\/5191\",\"name\":\"\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bfVyatta\u3068VyOS\u3092\u7528\u3044\u3066SoftLayer\u3068\u30aa\u30d5\u30a3\u30b9\u3092IPsec VPN\u63a5\u7d9a\u3059\u308b #softlayer - Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/softlayer\\\/5191#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/softlayer\\\/5191#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cms_x3GWkuX\\\/wp-content\\\/uploads\\\/2014\\\/07\\\/softlayer-vyos-1.png\",\"datePublished\":\"2014-07-14T02:30:49+00:00\",\"dateModified\":\"2026-05-27T13:14:36+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/#\\\/schema\\\/person\\\/16f1373831fb6fd17387f16ae1195206\"},\"description\":\"d-higuchi, softlayer |VyOS \u3068\u306f VyOS \u3068\u306f\u3001\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u3067\u958b\u767a\u3055\u308c\u3066\u3044\u308b\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bf\u3067\u3059\u3002Debian GNU\\\/Linux\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/softlayer\\\/5191#breadcrumb\"},\"inLanguage\":\"ja\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/softlayer\\\/5191\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"ja\",\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/softlayer\\\/5191#primaryimage\",\"url\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cms_x3GWkuX\\\/wp-content\\\/uploads\\\/2014\\\/07\\\/softlayer-vyos-1.png\",\"contentUrl\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cms_x3GWkuX\\\/wp-content\\\/uploads\\\/2014\\\/07\\\/softlayer-vyos-1.png\",\"width\":803,\"height\":306},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/softlayer\\\/5191#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"HOME\",\"item\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u30af\u30e9\u30a6\u30c9\u30cd\u30a4\u30c6\u30a3\u30d6\",\"item\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"softlayer\",\"item\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cloudnative\\\/softlayer\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bfVyatta\u3068VyOS\u3092\u7528\u3044\u3066SoftLayer\u3068\u30aa\u30d5\u30a3\u30b9\u3092IPsec VPN\u63a5\u7d9a\u3059\u308b #softlayer\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/#website\",\"url\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/\",\"name\":\"Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3\",\"description\":\"\u30a2\u30b8\u30e3\u30a4\u30eb\uff06DevOps\u3001\u30af\u30e9\u30a6\u30c9\u30cd\u30a4\u30c6\u30a3\u30d6\u3001AI\uff06LLM\u306e\u5148\u7aef\u6280\u8853\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ja\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/#\\\/schema\\\/person\\\/16f1373831fb6fd17387f16ae1195206\",\"name\":\"Daisuke Higuchi\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ja\",\"@id\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cms_x3GWkuX\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/pngout-25-230x230.png\",\"url\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cms_x3GWkuX\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/pngout-25-230x230.png\",\"contentUrl\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/cms_x3GWkuX\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/pngout-25-230x230.png\",\"caption\":\"Daisuke Higuchi\"},\"description\":\"\u306f\u3084\u308a\u306e\u6280\u8853\u8981\u7d20\u306b\u52a0\u3048\u3066\u3001\u4f1a\u8b70\u306e\u9032\u3081\u65b9\u30fb\u6587\u7ae0\u306e\u66f8\u304d\u65b9\u306a\u3069\u306e\u696d\u52d9\u6539\u5584\u306b\u3082\u53d6\u308a\u7d44\u3093\u3067\u3044\u307e\u3059\u3002\u300cChef\u6d3b\u7528\u30ac\u30a4\u30c9\u300d\u5171\u8457\u306e\u307b\u304b\u3001Debian Official Developer\u3082\u3084\u3063\u3066\u3044\u307e\u3059\u3002\",\"url\":\"https:\\\/\\\/www.creationline.com\\\/tech-blog\\\/author\\\/higuchi\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bfVyatta\u3068VyOS\u3092\u7528\u3044\u3066SoftLayer\u3068\u30aa\u30d5\u30a3\u30b9\u3092IPsec VPN\u63a5\u7d9a\u3059\u308b #softlayer - Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3","description":"d-higuchi, softlayer |VyOS \u3068\u306f VyOS \u3068\u306f\u3001\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u3067\u958b\u767a\u3055\u308c\u3066\u3044\u308b\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bf\u3067\u3059\u3002Debian GNU\/Linux","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191","og_locale":"ja_JP","og_type":"article","og_title":"\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bfVyatta\u3068VyOS\u3092\u7528\u3044\u3066SoftLayer\u3068\u30aa\u30d5\u30a3\u30b9\u3092IPsec VPN\u63a5\u7d9a\u3059\u308b #softlayer - Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3","og_description":"d-higuchi, softlayer |VyOS \u3068\u306f VyOS \u3068\u306f\u3001\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u3067\u958b\u767a\u3055\u308c\u3066\u3044\u308b\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bf\u3067\u3059\u3002Debian GNU\/Linux","og_url":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191","og_site_name":"Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3","article_publisher":"https:\/\/www.facebook.com\/creationline","article_published_time":"2014-07-14T02:30:49+00:00","article_modified_time":"2026-05-27T13:14:36+00:00","og_image":[{"width":803,"height":306,"url":"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2014\/07\/softlayer-vyos-1.png","type":"image\/png"}],"author":"Daisuke Higuchi","twitter_card":"summary_large_image","twitter_creator":"@creationline","twitter_site":"@creationline","twitter_misc":{"\u57f7\u7b46\u8005":"Daisuke Higuchi","\u63a8\u5b9a\u8aad\u307f\u53d6\u308a\u6642\u9593":"11\u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191#article","isPartOf":{"@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191"},"author":{"name":"Daisuke Higuchi","@id":"https:\/\/www.creationline.com\/tech-blog\/#\/schema\/person\/16f1373831fb6fd17387f16ae1195206"},"headline":"\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bfVyatta\u3068VyOS\u3092\u7528\u3044\u3066SoftLayer\u3068\u30aa\u30d5\u30a3\u30b9\u3092IPsec VPN\u63a5\u7d9a\u3059\u308b #softlayer","datePublished":"2014-07-14T02:30:49+00:00","dateModified":"2026-05-27T13:14:36+00:00","mainEntityOfPage":{"@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191"},"wordCount":350,"image":{"@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191#primaryimage"},"thumbnailUrl":"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2014\/07\/softlayer-vyos-1.png","articleSection":["d-higuchi","softlayer"],"inLanguage":"ja"},{"@type":"WebPage","@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191","url":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191","name":"\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bfVyatta\u3068VyOS\u3092\u7528\u3044\u3066SoftLayer\u3068\u30aa\u30d5\u30a3\u30b9\u3092IPsec VPN\u63a5\u7d9a\u3059\u308b #softlayer - Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3","isPartOf":{"@id":"https:\/\/www.creationline.com\/tech-blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191#primaryimage"},"image":{"@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191#primaryimage"},"thumbnailUrl":"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2014\/07\/softlayer-vyos-1.png","datePublished":"2014-07-14T02:30:49+00:00","dateModified":"2026-05-27T13:14:36+00:00","author":{"@id":"https:\/\/www.creationline.com\/tech-blog\/#\/schema\/person\/16f1373831fb6fd17387f16ae1195206"},"description":"d-higuchi, softlayer |VyOS \u3068\u306f VyOS \u3068\u306f\u3001\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u3067\u958b\u767a\u3055\u308c\u3066\u3044\u308b\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bf\u3067\u3059\u3002Debian GNU\/Linux","breadcrumb":{"@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191#breadcrumb"},"inLanguage":"ja","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191"]}]},{"@type":"ImageObject","inLanguage":"ja","@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191#primaryimage","url":"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2014\/07\/softlayer-vyos-1.png","contentUrl":"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2014\/07\/softlayer-vyos-1.png","width":803,"height":306},{"@type":"BreadcrumbList","@id":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer\/5191#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"HOME","item":"https:\/\/www.creationline.com\/tech-blog"},{"@type":"ListItem","position":2,"name":"\u30af\u30e9\u30a6\u30c9\u30cd\u30a4\u30c6\u30a3\u30d6","item":"https:\/\/www.creationline.com\/tech-blog\/cloudnative"},{"@type":"ListItem","position":3,"name":"softlayer","item":"https:\/\/www.creationline.com\/tech-blog\/cloudnative\/softlayer"},{"@type":"ListItem","position":4,"name":"\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30eb\u30fc\u30bfVyatta\u3068VyOS\u3092\u7528\u3044\u3066SoftLayer\u3068\u30aa\u30d5\u30a3\u30b9\u3092IPsec VPN\u63a5\u7d9a\u3059\u308b #softlayer"}]},{"@type":"WebSite","@id":"https:\/\/www.creationline.com\/tech-blog\/#website","url":"https:\/\/www.creationline.com\/tech-blog\/","name":"Tech Blog\uff5c\u30af\u30ea\u30a8\u30fc\u30b7\u30e7\u30f3\u30e9\u30a4\u30f3","description":"\u30a2\u30b8\u30e3\u30a4\u30eb\uff06DevOps\u3001\u30af\u30e9\u30a6\u30c9\u30cd\u30a4\u30c6\u30a3\u30d6\u3001AI\uff06LLM\u306e\u5148\u7aef\u6280\u8853","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.creationline.com\/tech-blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ja"},{"@type":"Person","@id":"https:\/\/www.creationline.com\/tech-blog\/#\/schema\/person\/16f1373831fb6fd17387f16ae1195206","name":"Daisuke Higuchi","image":{"@type":"ImageObject","inLanguage":"ja","@id":"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2026\/05\/pngout-25-230x230.png","url":"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2026\/05\/pngout-25-230x230.png","contentUrl":"https:\/\/www.creationline.com\/tech-blog\/cms_x3GWkuX\/wp-content\/uploads\/2026\/05\/pngout-25-230x230.png","caption":"Daisuke Higuchi"},"description":"\u306f\u3084\u308a\u306e\u6280\u8853\u8981\u7d20\u306b\u52a0\u3048\u3066\u3001\u4f1a\u8b70\u306e\u9032\u3081\u65b9\u30fb\u6587\u7ae0\u306e\u66f8\u304d\u65b9\u306a\u3069\u306e\u696d\u52d9\u6539\u5584\u306b\u3082\u53d6\u308a\u7d44\u3093\u3067\u3044\u307e\u3059\u3002\u300cChef\u6d3b\u7528\u30ac\u30a4\u30c9\u300d\u5171\u8457\u306e\u307b\u304b\u3001Debian Official Developer\u3082\u3084\u3063\u3066\u3044\u307e\u3059\u3002","url":"https:\/\/www.creationline.com\/tech-blog\/author\/higuchi"}]}},"_links":{"self":[{"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/posts\/5191","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/comments?post=5191"}],"version-history":[{"count":3,"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/posts\/5191\/revisions"}],"predecessor-version":[{"id":83990,"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/posts\/5191\/revisions\/83990"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/media\/5197"}],"wp:attachment":[{"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/media?parent=5191"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/categories?post=5191"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.creationline.com\/tech-blog\/wp-json\/wp\/v2\/tags?post=5191"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}