Skip to content

RT001 Configuration

  • 最終更新日: 2026年2月27日
  • 最終更新者: 都築


# RTX830 Rev.15.02.33 (Tue Jul 15 12:21:51 2025)
# MAC Address : ac:44:f2:2f:a3:4c, ac:44:f2:2f:a3:4d
# Memory 256Mbytes, 2LAN
# main:  RTX830 ver=00 serial=M5B565845 MAC-Address=ac:44:f2:2f:a3:4c MAC-Address=ac:44:f2:2f:a3:4d
# Reporting Date: Feb 27 14:52:44 2026
login password *
administrator password encrypted *
login user it *
user attribute connection=serial,telnet,remote,ssh,sftp,http gui-page=dashboard,lan-map,config login-timer=300
user attribute it connection=serial,telnet,remote,ssh,sftp,http gui-page=dashbo
ard,lan-map,config login-timer=300
ip route default gateway dhcp lan2
ip keepalive 1 icmp-echo 10 5 dhcp lan2
vlan port mapping lan1.1 vlan1
vlan port mapping lan1.2 vlan1
vlan port mapping lan1.3 vlan1
vlan port mapping lan1.4 vlan2
lan type lan1 port-based-option=divide-network
ip vlan1 address 192.168.10.254/24
ip vlan2 address 192.168.100.238/24
ip lan2 address dhcp
ip lan2 secure filter in 101003 101004 101005 101020 101021 101022 101023 101024 101025 101030 101032 101040 101042 101050 101052
ip lan2 secure filter out 101013 101014 101015 101020 101021 101022 101023 101024 101025 101026 101027 101099 dynamic 101080 101081 101082 101083 101084 101085 101098 101099
ip lan2 nat descriptor 200
ip filter 101000 reject 10.0.0.0/8 * * * *
ip filter 101001 reject 172.16.0.0/12 * * * *
ip filter 101002 reject 192.168.0.0/16 * * * *
ip filter 101003 reject 192.168.10.0/24 * * * *
ip filter 101004 reject 192.168.100.0/24 * * * *
ip filter 101005 reject 192.168.102.0/24 * * * *
ip filter 101010 reject * 10.0.0.0/8 * * *
ip filter 101011 reject * 172.16.0.0/12 * * *
ip filter 101012 reject * 192.168.0.0/16 * * *
ip filter 101013 reject * 192.168.10.0/24 * * *
ip filter 101014 reject * 192.168.100.0/24 * * *
ip filter 101015 reject * 192.168.102.0/24 * * *
ip filter 101020 reject * * udp,tcp 135 *
ip filter 101021 reject * * udp,tcp * 135
ip filter 101022 reject * * udp,tcp netbios_ns-netbios_ssn *
ip filter 101023 reject * * udp,tcp * netbios_ns-netbios_ssn
ip filter 101024 reject * * udp,tcp 445 *
ip filter 101025 reject * * udp,tcp * 445
ip filter 101026 restrict * * tcpfin * www,21,nntp
ip filter 101027 restrict * * tcprst * www,21,nntp
ip filter 101030 pass * 192.168.10.0/24 icmp * *
ip filter 101031 pass * 192.168.10.0/24 established * *
ip filter 101032 pass * 192.168.10.0/24 tcp * ident
ip filter 101033 pass * 192.168.10.0/24 tcp ftpdata *
ip filter 101034 pass * 192.168.10.0/24 tcp,udp * domain
ip filter 101035 pass * 192.168.10.0/24 udp domain *
ip filter 101036 pass * 192.168.10.0/24 udp * ntp
ip filter 101037 pass * 192.168.10.0/24 udp ntp *
ip filter 101040 pass * 192.168.100.0/24 icmp * *
ip filter 101041 pass * 192.168.100.0/24 established * *
ip filter 101042 pass * 192.168.100.0/24 tcp * ident
ip filter 101043 pass * 192.168.100.0/24 tcp ftpdata *
ip filter 101044 pass * 192.168.100.0/24 tcp,udp * domain
ip filter 101045 pass * 192.168.100.0/24 udp domain *
ip filter 101046 pass * 192.168.100.0/24 udp * ntp
ip filter 101047 pass * 192.168.100.0/24 udp ntp *
ip filter 101050 pass * 192.168.102.0/24 icmp * *
ip filter 101051 pass * 192.168.102.0/24 established * *
ip filter 101052 pass * 192.168.102.0/24 tcp * ident
ip filter 101053 pass * 192.168.102.0/24 tcp ftpdata *
ip filter 101054 pass * 192.168.102.0/24 tcp,udp * domain
ip filter 101055 pass * 192.168.102.0/24 udp domain *
ip filter 101056 pass * 192.168.102.0/24 udp * ntp
ip filter 101057 pass * 192.168.102.0/24 udp ntp *
ip filter 101099 pass * * * * *
ip filter 500000 restrict * * * * *
ip filter dynamic 101080 * * ftp
ip filter dynamic 101081 * * domain
ip filter dynamic 101082 * * www
ip filter dynamic 101083 * * smtp
ip filter dynamic 101084 * * pop3
ip filter dynamic 101085 * * submission
ip filter dynamic 101098 * * tcp
ip filter dynamic 101099 * * udp
nat descriptor type 200 masquerade
nat descriptor address outer 200 primary
dhcp service server
dhcp server rfc2131 compliant except remain-silent
dhcp scope 1 192.168.10.101-192.168.10.199/24
dns host vlan1
dns server dhcp lan2
dns server select 500201 dhcp lan2 any .
dns private address spoof on
snmp host 192.168.100.11 public
snmp trap host 192.168.100.11
snmpv2c host 192.168.100.11 public
snmpv2c trap host 192.168.100.11
schedule at 1 */* 00:00:00 * ntpdate ntp.nict.jp syslog
sshd service on
sshd host key generate *
statistics traffic on