! ! Century Systems NXR-530 Series ver 21.11.11C (build 1/09:06 06 09 2022) ! hostname nxr530 telnet-server enable telnet-server ip forbidden-access-wan telnet-server ipv6 forbidden-access-wan http-server enable http-server ip forbidden-access-wan http-server ipv6 forbidden-access-wan no rest http enable no rest https enable ! ! ! ! ! ipv6 forwarding fast-forwarding enable ! ! ! ! ppp account username [ISP_A接続用ユーザID] password [ISP_A接続用パスワード] ! ! l2tp udp source-port 40001 ! ! ! ! ! interface ppp 0 ip address negotiated ip tcp adjust-mss auto ip masquerade ip spi-filter ppp username [ISP_A接続用ユーザID] ppp ipcp enable ppp ipcp dns reject ! interface ethernet 0 ip address 192.168.10.1/24 ip policy route-map eth0_PBR classify input route-map INTERCEPT ! interface ethernet 1 no ip address pppoe-client ppp 0 ! interface ethernet 2 ip address dhcp ip tcp adjust-mss auto ip dns-intercept 0 ip masquerade ip spi-filter ! dns service enable ! dns-intercept 0 match ip setname DNSI ! ! syslog local enable exit-syslog ! ! ! system led ext 0 signal-level mobile 0 ! ! ! ! ! ! ! ! ip dns-intercept setname DNSI file ! ! class access-list DNSI_ACL ip any dns-set DNSI tcp any 80 class access-list DNSI_ACL ip any dns-set DNSI tcp any 443 ! route-map INTERCEPT permit 1 match ip address DNSI_ACL set mark 1 ! route-map eth0_PBR permit 1 match ip mark 1 set interface ppp 0 ! ! end