{"id":897,"date":"2019-04-18T20:04:49","date_gmt":"2019-04-18T11:04:49","guid":{"rendered":"https:\/\/shonanfujisawa.net\/?p=897"},"modified":"2019-04-18T20:17:26","modified_gmt":"2019-04-18T11:17:26","slug":"netgear-m4300-gsm4328s-%e3%81%a7-ip-acl-extended-rule-%e3%82%92%e6%8c%87%e5%ae%9a%e3%81%97%e3%81%a6vlan%e9%96%93%e3%81%ae%e9%80%9a%e4%bf%a1%e3%82%92%e3%81%95%e3%81%9b%e3%81%aa%e3%81%84","status":"publish","type":"post","link":"https:\/\/shonanfujisawa.net\/?p=897","title":{"rendered":"NETGEAR M4300 ( GSM4328S ) \u3067 IP ACL ( Extended Rule ) \u3092\u6307\u5b9a\u3057\u3066VLAN\u9593\u306e\u901a\u4fe1\u3092\u3055\u305b\u306a\u3044\u8a2d\u5b9a\u3092\u3059\u308b\u306b\u306f"},"content":{"rendered":"

NETGEAR M4300-26G \u3068\u304b\u3044\u3063\u3066\u3001GSM4328S \u306a\u3093\u3066\u66f8\u3044\u3066\u3042\u308b\u306e\u3082\u3042\u308b\u3057\u3001\u65e5\u672c\u8a9e\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u4e0d\u8db3\u3057\u3066\u308b\u3057\u3001\u308f\u304b\u308a\u306b\u304f\u3044\u3057 <\/H2><\/p>\n

\u3068\u66f8\u304f\u3068\u3001\u306a\u3093\u304b\u3001\u30e9\u30ce\u30d9\u306e\u30bf\u30a4\u30c8\u30eb\u307f\u305f\u3044\u3067\u3059\u306d\u3002\uff08\u9577\u3059\u304e\uff09<\/p>\n

\u3084\u308a\u305f\u3044\u3053\u3068\u306f\u4e0b\u306e\u56f3\u3067\u3059\u3002<\/p>\n

\"\"<\/p>\n

\u30b9\u30a4\u30c3\u30c1\u306e\u4e2d\u306b\u4eee\u60f3\u306e\u30b9\u30a4\u30c3\u30c1\u304c\u3042\u3063\u3066\u3001VLAN\u306f\u305d\u3053\u306b\u3064\u306a\u304c\u3063\u3066\u3044\u3066\u901a\u4fe1\u3067\u304d\u308b\u30a4\u30e1\u30fc\u30b8\u3067\u3059\u3002
\nVLAN101\u304b\u3089VLAN301\u306f\u90e8\u5c4b\u3067\u3001VLAN1000\u304c\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u3078\u3064\u306a\u304c\u308b\u3082\u306e\u3002VLAN999\u304c\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u7528\u3068\u3068\u3089\u3048\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n

\u90e8\u5c4b\u540c\u58eb\u306f\u52dd\u624b\u306b\u3084\u308a\u53d6\u308a\u3055\u308c\u305f\u3089\u56f0\u308b\u3051\u308c\u3069\u3001\u5168\u90e8\u304c\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u306f\u898b\u306b\u884c\u3051\u308b\u8a2d\u5b9a\u306b\u3057\u305f\u3044\u3057\u3001\u30e1\u30f3\u30c6\u306e\u3068\u304d\u306b\u306f\u3069\u3053\u306e\u90e8\u5c4b\u306b\u3082\u901a\u4fe1\u3057\u3066\u30ea\u30e2\u30fc\u30c8\u3067\u4f5c\u696d\u3092\u3057\u305f\u3044\u3068\u3044\u3046\u30b1\u30fc\u30b9\u3067\u3059\u3002<\/p>\n

\u3053\u306e\u3042\u305f\u308a\u306e\u8a71\u306e\u7d9a\u304d\u3067\u3059\u3002
\nNETGEAR M4300-26G \u3067 VLAN \u3092\u5207\u3063\u3066\u307f\u305f<\/a><\/p>\n

ACL \u3067\u8a2d\u5b9a\u3057\u307e\u3059 <\/H2><\/p>\n

\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306b\u8a73\u3057\u3044\u4eba\u304c\u300cACL\u3067\u8a2d\u5b9a\u3059\u308c\u3070\u3044\u3044\u300d\u3068\u30d2\u30f3\u30c8\u3092\u304f\u308c\u307e\u3057\u305f\u3002
\n\u6559\u3048\u3066\u3082\u3089\u3063\u305f\u306e\u3068\u9055\u3046\u3068\u3053\u308d\u304c\u3042\u3063\u3066\u3001\u3046\u307e\u304f\u3044\u3063\u3066\u306a\u304b\u3063\u305f\u306e\u3067\u3001\u305d\u3053\u3092\u81ea\u529b\u89e3\u6c7a\u3057\u307e\u3057\u305f\u3002
\n\u3067\u3082\u3001NETGEAR\u306e\u5834\u5408\u3001Private VLAN\u3092\u3064\u304b\u3063\u3066\u3084\u308c\u3070\u3088\u3044\u307f\u305f\u3044\u3067\u3059\u304c\u3001\u305d\u3061\u3089\u306f\u8abf\u3079\u3066\u3044\u307e\u305b\u3093\u3002 Extended ACL \u3067\u3084\u308a\u307e\u3059\u3002<\/p>\n

\u300eIP\u30a2\u30c9\u30ec\u30b9\u300f\u3067\u6307\u5b9a\u3057\u3001\u300eSource\u300f\u304b\u3089\u300eDestination\u300f\u3078\u306e\u901a\u4fe1\u3092\u300eDney\u300f\u3059\u308b\u3001\u3068\u3044\u3046\u8a2d\u5b9a\u3002
\n\u3053\u3053\u3067\u96e3\u3057\u304b\u3063\u305f\u306e\u304c Source \u306e \u30de\u30b9\u30af\u306b\u3064\u3044\u3066\u3002172.16.11.0\/24 \u304b\u3089\u306e\u901a\u4fe1\u306a\u3089\u3001172.11.0 \u3092 Source \u306b\u6307\u5b9a\u3057\u307e\u3059\u304c\u3001\u30de\u30b9\u30af\u306f 0.0.0.255 \u306b\u306a\u308a\u307e\u3059\u3002
\n\u3053\u308c\u306f Destination \u3082\u540c\u69d8\u3002172.16.12.0\/24 \u3078\u306e\u901a\u4fe1\u3092\u3055\u305b\u305f\u304f\u306a\u3044\u306a\u3089\u3001 172.16.12.0 \u3092\u6307\u5b9a\u3057\u3001\u30de\u30b9\u30af\u3092 0.0.0.255 \u3068\u3057\u307e\u3059\u3002<\/p>\n

NETGEAR\u306e\u8a2d\u5b9a\u753b\u9762\u304c Source IP Mask \u3068\u66f8\u3044\u3066\u3042\u308b\u304b\u3089\u3001Subnet Mask \u306e\u66f8\u304d\u65b9\u3067\u3044\u3044\u3093\u3058\u3083\u306a\u3044\u304b\u3068\u304b\u8aa4\u89e3\u3057\u3084\u3059\u3044\u3067\u3059\u3002
\n\u307e\u305f\u3001ACL ID\/Name \u3067 vlan\u540d\u3068\u304b\u3092\u6307\u5b9a\u3057\u3066\u3082\u3001\u305d\u308c\u3068\u7d10\u4ed8\u3044\u3066\u3044\u308b\u308f\u3051\u3067\u306f\u306a\u3044\u306e\u3067\u3001\u305d\u308c\u305e\u308c Source \u3068 Destination \u306e\u6307\u5b9a\u306f\u5fc5\u8981\u3067\u3059\u3002\u3053\u306e\u90e8\u5206\u306fFortigate\u306a\u3069\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306e\u8a2d\u5b9a\u3092\u3059\u308b\u6642\u306e\u30a4\u30e1\u30fc\u30b8\u3068\u540c\u69d8\u3067\u3057\u305f\u3002Security\u306e\u9805\u76ee\u3058\u3083\u306a\u304f\u3066Routing\u306e\u3068\u3053\u308d\u306b\u3042\u308c\u3070\u3001\u3082\u3063\u3068\u30a4\u30e1\u30fc\u30b8\u3057\u3084\u3059\u3044\u306e\u304b\u3082\u3057\u308c\u307e\u305b\u3093\u3002VLAN\u540c\u58eb\u3067\u306f\u306a\u304f\u3066\u3001IP\u540c\u58eb\u3067\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/p>\n

Extended ACL Rule \u8a2d\u5b9a <\/H2><\/p>\n

Security > ACL \u3067 ACL \u306e\u30e1\u30cb\u30e5\u30fc\u3092\u958b\u304d\u3001 Advanced > IP ACL \u3067\u307e\u305a\u306fID\u3092\u4f5c\u308a\u307e\u3059\u3002
\n\u4ee5\u4e0b\u306e\u8868\u306f\u4f5c\u6210\u6e08\u307f\u306e\u3082\u306e\u3002\u8ffd\u52a0(\u65b0\u898f)\u306e\u3068\u304d\u306f\u3001IP ACL ID \u306b\u540d\u524d\u3092\u5165\u308c\u3066\u53f3\u4e0a\u306b\u3042\u308b(\u753b\u9762\u306b\u306f\u5199\u3063\u3066\u3044\u307e\u305b\u3093) ADD \u30dc\u30bf\u30f3\u3092\u62bc\u3057\u3066\u4f5c\u308a\u307e\u3059\u3002<\/p>\n

\"\"<\/a><\/p>\n

\u30cd\u30c3\u30c8\u4e0a\u306b\u3042\u308b\u53e4\u3044\u753b\u9762\u306e\u8aac\u660e\u3067\u306f\u3001\u901a\u5e38\u306eACL\u306f1\uff5e99\u3001Extended \u306f 10\uff5e199 \u306e\u6570\u5b57\u3068\u3044\u3046\u8a18\u8ff0\u304c\u3042\u3063\u305f\u306e\u3067\u3059\u304c\u3001\u3053\u3053\u3067\u306f vlan101 \u3068 VLAN ID \u3092\u6307\u5b9a\u3057\u3066\u3044\u307e\u3059\u3002
\n\u308f\u304b\u308a\u3084\u3059\u3044\u3088\u3046\u306b\u2026\u3068\u3044\u3046\u3053\u3068\u3067\u5148\u751f\u304c\u6307\u5b9a\u3057\u3066\u304f\u308c\u305f\u306e\u3067\u3059\u304c\u3001\u3053\u308c\u304c\u3061\u3087\u3063\u3068\u30cf\u30de\u3063\u305f\u539f\u56e0\u305d\u306e\uff11\u3002\u3053\u3053\u306b\u5165\u308c\u3066\u3082vlan\u3068\u7d10\u3065\u304f\u306e\u3067\u306f\u306a\u3044\u304b\u3089\u3001source\u3084\u3067destination\u306f\u3061\u3083\u3093\u3068\u6307\u5b9a\u3057\u306a\u3051\u308c\u3070\u306a\u308a\u307e\u305b\u3093\u3002<\/p>\n

\u4f5c\u308a\u305f\u3044 ID \u304c\u6c7a\u307e\u3063\u305f\u3089\u3001 \u5de6\u30da\u30a4\u30f3\u306e\u30e1\u30cb\u30e5\u30fc\u304b\u3089 IP Extended Rules \u3092\u9078\u3073\u307e\u3059\u3002
\n\u3053\u308c\u3082\u3059\u3067\u306b\u4f5c\u6210\u6e08\u307f\u306e\u753b\u9762\u3067\u3059\u3002
\n\u30eb\u30fc\u30eb\u306f\u5c0f\u3055\u3044\u756a\u53f7\u304b\u3089\u8a66\u3055\u308c\u3001\u305d\u308c\u305e\u308c\u306e\u30c1\u30e5\u30fc\u30ea\u30c3\u30d7\u306b\u5165\u3089\u306a\u304b\u3063\u305f\u3089\u4e00\u756a\u4e0b\u306e\u53e3\u306b\u5438\u3044\u8fbc\u307e\u308c\u308b\u30d1\u30c1\u30f3\u30b3\u306e\u3088\u3046\u306b(\u30d1\u30c1\u30f3\u30b3\u306f\u307e\u3063\u305f\u304f\u3084\u3089\u306a\u3044\u304b\u3089\u6700\u8fd1\u306e\u3053\u3068\u306f\u3057\u308a\u307e\u305b\u3093\u304c)\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/p>\n

\"\"<\/a><\/p>\n

\"\"<\/a><\/p>\n

MatchEvery(\u5168\u90e8)\u3067\u306f\u306a\u304f(false)\u3001IP\u30a2\u30c9\u30ec\u30b9\u6307\u5b9a\u3067\u3001Source\u304b\u3089Destination\u3078\u3001Deny \u3059\u308b\u3001\u3068\u3044\u3046\u3082\u306e\u3002<\/p>\n

\u8a2d\u5b9a\u3092\u3059\u308b\u5834\u5408\u306f\u3001\u53f3\u4e0a\u306e ADD \u30dc\u30bf\u30f3\u3092\u62bc\u3057\u307e\u3059\u3002
\n\u8a2d\u5b9a\u753b\u9762\u304c\u51fa\u307e\u3059\u3002<\/p>\n

\"\"<\/a><\/p>\n

\u4ee5\u4e0b\u306e\u5165\u529b\u304c\u53c2\u8003\u306b\u306a\u308b\u3068\u601d\u3044\u307e\u3059\u3002
\n\u305d\u3057\u3066\u3001\u3053\u306e\u306a\u306b\u3082\u66f8\u3044\u3066\u3044\u306a\u3044\u30de\u30b9\u306bMask\u3092\u901a\u5e38\u3068\u9006\u306e\u66f8\u304d\u65b9\u3067\u5165\u308c\u308d\u306a\u3093\u3066\u3001\u666e\u901a\u3058\u3083\u308f\u304b\u308a\u307e\u305b\u3093\u3088\u306d\uff1f\u3000\u3053\u3053\u3082\u5148\u751f\u306e\u30cf\u30de\u308a\u30dd\u30a4\u30f3\u30c8\u3060\u3063\u305f\u3088\u3046\u3067\u3001\u3053\u308c\u306fNETGEAR\u304c\u516c\u958b\u3057\u3066\u308bmynavi\u306e\u300c\u3044\u307e\u3055\u3089\u805e\u3051\u306a\u3044\u30b9\u30a4\u30c3\u30c1\u306e\u57fa\u790e\u300d\u3092\u898b\u305f\u3089\u66f8\u3044\u3066\u3042\u308a\u307e\u3057\u305f\u3002
\n\u66f8\u3044\u3066\u3042\u3063\u305f\u3051\u308c\u3069\u3001\u300e\u767a\u5c55\u7de8 – ACL\u300f\u3067\u306f\u4f8b\u3082\u4f75\u305b\u3066\u300c\u30ef\u30a4\u30eb\u30c9\u30ab\u30fc\u30c9\u30de\u30b9\u30af\u300d\u3068\u3042\u308b\u3051\u308c\u3069\u3001\u300eACL\u3092\u5229\u7528\u3057\u305f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3000ACL\u306e\u8a2d\u5b9a\u300f\u306e\u307b\u3046\u3060\u3068\u3001\u300c\u4e00\u822c\u7684\u306a\u30b5\u30d6\u30cd\u30c3\u30c8\u30de\u30b9\u30af\u306e\u8a18\u8ff0\u65b9\u6cd5\u3068\u306f\u9006\u3067\u3042\u308b\u300d\u3068\u3042\u308b\u3060\u3051\u3067\u4f8b\u306f\u306a\u3044\u308f\u3001\u753b\u9762\u30ad\u30e3\u30d7\u30c1\u30e3\u3067\u3082\u30de\u30b9\u30af\u306e\u3068\u3053\u308d\u306f\u5024\u304c\u5165\u3063\u3066\u3044\u306a\u3044\u308f\u3067\u3001\u3061\u3087\u3063\u3068\u6587\u53e5\u3092\u8a00\u3044\u305f\u3044\u3068\u3053\u308d\u3002
\n\uff08\u305d\u3093\u306a\u306e\u308f\u304b\u3089\u306a\u3044\u7d20\u4eba\u304c\u8cb7\u3046\u3082\u306e\u3058\u3083\u306a\u3044\u3093\u3060\u3088\u3001\u3068\u8a00\u308f\u308c\u308c\u3070\u3001\u305d\u3046\u306a\u3093\u3067\u3059\u304c\u3002\uff09<\/p>\n

\u3053\u308c\u304c\u3042\u3063\u305f\u306e\u3067\u3001\u81ea\u5206\u306e\u30d6\u30ed\u30b0\u306b\u66f8\u3044\u3066\u304a\u3053\u3046\u3068\u601d\u3044\u307e\u3057\u305f\u3002
\n\u3042\u3068\u304b\u3089\u8a2d\u5b9a\u3059\u308b\u4eba\u304c\u898b\u3066\u3001\u6c17\u3065\u3044\u3066\u304f\u308c\u308c\u3070\u5f79\u306b\u7acb\u3064\u3068\u601d\u3046\u304b\u3089\u3002<\/p>\n

\u8a2d\u5b9a\u3057\u7d42\u308f\u3063\u305f\u3089 Apply \u3092\u62bc\u3057\u307e\u3059\u3002<\/p>\n

\"\"<\/a><\/p>\n

\u4eca\u56de\u306f60\u3067\u6307\u5b9a\u3057\u305f\u300c\u30c1\u30e5\u30fc\u30ea\u30c3\u30d7\u306b\u5165\u3089\u306a\u304b\u3063\u305f\u5834\u5408\u300d\u306e\u3001\u8a72\u5f53\u3057\u306a\u3051\u308c\u3070\u5168\u8a31\u53ef\u306e\u8a2d\u5b9a\u306f\u4ee5\u4e0b\u3067\u3059\u3002<\/p>\n

Action\u304cPermit\u3067\u3001Match Every\u304cTrue\u306b\u306a\u308a\u307e\u3059\u3002
\n\u3064\u307e\u308a\u3001\u300c\u6700\u5f8c\u306f\u304a\u9858\u3044\u3057\u307e\u3059\u3001\u306f\u3089\u305f\u3044\u3089\u3055\u3093\u306b\u5168\u90e8\u300d\u3067\u3059\u3002<\/p>\n

\"\"<\/a><\/p>\n

\u3053\u308c\u3067ACL\u306e\u8a2d\u5b9a\u304c\u3067\u304d\u307e\u3057\u305f\u3002
\n\u30c6\u30b9\u30c8\u3057\u3066\u554f\u984c\u304c\u306a\u3051\u308c\u3070\u3001\u30bb\u30fc\u30d6\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n

\u53c2\u8003\uff1a
\nL3 ( NETGEAR M4300 ) \u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u30eb\u30fc\u30c8\u3068\u4e0a\u4f4d\u30eb\u30fc\u30bf\u8a2d\u5b9a<\/a>
\nNETGEAR M4300-28G \u306e DHCP \u8a2d\u5b9a\u3092\u3057\u3066\u307f\u305f\uff08\u9664\u5916\u3068\u304b\u3082<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

NETGEAR M4300-26G \u3068\u304b\u3044\u3063\u3066\u3001GSM4328S \u306a\u3093\u3066\u66f8\u3044\u3066\u3042\u308b\u306e\u3082\u3042\u308b\u3057\u3001\u65e5\u672c\u8a9e\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u4e0d\u8db3\u3057\u3066\u308b\u3057\u3001\u308f\u304b\u308a\u306b\u304f\u3044\u3057 \u3068\u66f8\u304f\u3068\u3001\u306a\u3093\u304b\u3001\u30e9\u30ce\u30d9\u306e\u30bf\u30a4\u30c8\u30eb\u307f\u305f\u3044\u3067\u3059\u306d\u3002\uff08\u9577\u3059\u304e\uff09 \u3084\u308a\u305f\u3044\u3053\u3068\u306f\u4e0b\u306e\u2026 \u7d9a\u304d\u3092\u8aad\u3080 »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10,3,5],"tags":[],"class_list":{"0":"post-897","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"hentry","6":"category-it","8":"category-5"},"_links":{"self":[{"href":"https:\/\/shonanfujisawa.net\/index.php?rest_route=\/wp\/v2\/posts\/897","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/shonanfujisawa.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/shonanfujisawa.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/shonanfujisawa.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/shonanfujisawa.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=897"}],"version-history":[{"count":3,"href":"https:\/\/shonanfujisawa.net\/index.php?rest_route=\/wp\/v2\/posts\/897\/revisions"}],"predecessor-version":[{"id":908,"href":"https:\/\/shonanfujisawa.net\/index.php?rest_route=\/wp\/v2\/posts\/897\/revisions\/908"}],"wp:attachment":[{"href":"https:\/\/shonanfujisawa.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=897"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/shonanfujisawa.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=897"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/shonanfujisawa.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=897"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}