! ! Century Systems NXR-G100 Series ver 6.12.0 (build 16/18:34 08 07 2016) ! hostname NXR telnet-server enable http-server enable ! ! system power-management mode balance ! ! ! ipv6 forwarding no fast-forwarding enable ! ! ! ! ! l2tpv3 udp path-mtu-discovery enable l2tpv3 hostname nxr l2tpv3 router-id 192.168.10.2 ! ipsec local policy 1 address ipv6 self-identity fqdn nxr ! ! ipsec isakmp policy 1 description YAMAHA authentication pre-share ipseckey hash sha256 encryption aes128 group 5 isakmp-mode aggressive remote address ipv6 .aoi.flets-east.jp local policy 1 ! ! ipsec tunnel policy 1 description YAMAHA set transform esp-aes128 esp-sha256-hmac set pfs group5 set key-exchange isakmp 1 set protocol-mode transport match address ipsec_acl ! ! l2tpv3 tunnel 1 description YAMAHA tunnel address ipv6 .aoi.flets-east.jp tunnel hostname yamaha tunnel router-id 192.168.10.1 tunnel protocol udp ! l2tpv3 xconnect 1 description YAMAHA tunnel 1 xconnect ethernet 0 xconnect end-id 1 retry-interval 30 ip tcp adjust-mss auto ! interface ethernet 0 ip address 192.168.10.2/24 ! interface ethernet 1 no ip address ipv6 access-group in eth1_in ipv6 access-group out eth1_out ipv6 spi-filter ipv6 address autoconfig ipv6 dhcp client ipv6dhcpc ipsec policy 1 ! dns service enable edns-query enable ! syslog local enable ! ! ipv6 dhcp-client ipv6dhcpc information-only enable option-request dns-servers ! ! ! ! ! ! ! ! ! ipv6 access-list eth1_in permit any any icmpv6 ipv6 access-list eth1_in permit any any udp any 546 ipv6 access-list eth1_in permit any any udp 500 500 ipv6 access-list eth1_in permit any any 50 ipv6 access-list eth1_out deny any any udp any 1701 ! ipsec access-list ipsec_acl ipv6 host host ! ! ! end