WAN (プロバイダ側) から DHCP で配布された IPv4 アドレスを用いて、IP マスカレードで LAN 側のコンピュータがインターネットに接続できるようにします。
{
"version": "1.0",
"network": {
"wan": {
"wan": {
"ipv4": [{ "mode": "dhcp" }],
"ipv6": [{ "mode": "disabled" }]
}
},
"lan": {
"lan": {
"default": true,
"ipv4": { "mode": "static", "address": "192.168.100.1/24" },
"dhcp": {
"enabled": true,
"rangeStart": "192.168.100.100",
"rangeEnd": "192.168.100.150",
"leaseTime": "12h"
}
}
},
"ports": {
"sfp0": { "mode": "access", "network": "wan" },
"eth0": { "mode": "access", "network": "lan" },
"eth1": { "mode": "access", "network": "lan" },
"eth2": { "mode": "access", "network": "lan" },
"eth3": { "mode": "access", "network": "lan" },
"sfp1": { "mode": "access", "network": "lan" },
"sfp2": { "mode": "access", "network": "lan" },
"sfp3": { "mode": "access", "network": "lan" }
}
},
"firewall": {
"defaults": { "input": "drop", "output": "accept", "forward": "drop" },
"zones": {
"lan": { "members": ["lan"], "input": "accept", "output": "accept", "forward": "accept" },
"wan": { "members": ["wan"], "input": "drop", "output": "accept", "forward": "drop", "nat": true }
},
"forwardings": [{ "from": "lan", "to": "wan" }],
"rules": [
{ "name": "Allow-DHCP-Renew", "source": "wan", "protocol": "udp", "dstPort": [68], "family": "ipv4", "action": "accept" },
{ "name": "Allow-Ping", "source": "wan", "protocol": "icmp", "icmpType": ["echo-request"], "family": "ipv4", "action": "accept" }
]
},
"system": {
"hostname": "my-router",
"timezone": "Asia/Tokyo",
"maintenanceWindows": [
{ "dayOfWeek": 0, "startTime": "02:00", "durationMinutes": 120, "timezone": "Asia/Tokyo" }
]
}
}