SEIL/x86 ã§éãã§ã¿ã(ãã¬ããåç·ã¸ã®æ¥ç¶)
æè§SEIL/x86ãè³¼å ¥ããã®ã§ãå¼ãåãã¦ã¿ããã¨æãã¾ãã
ä»åã¯ãããã¼ããã³ãã«ã¼ã¿ã¨ãã¦ä¸è¬çãªããã¬ããåç·ã¸ã®æ¥ç¶ãã試ãã¦ã¿ã¾ãã
è¨å®ä¾ã«ã¤ãã¦ã¯ SEILã®ã½ãªã¥ã¼ã·ã§ã³ãã¼ã¸ ã«è©³ãã解説ããã¦ããã®ã§ããã¡ããåèã«ãã¾ããã
SEIL/x86 ãã¬ããæ¥ç¶ã®è¨å®
PPPoEã®è¨å®:
# ppp add bflets keepalive 30 ipcp enable ipcp-address on ipcp-dns on ipv6cp enable authentication-method chap identifier <ãã¬ããã®ID> passphrase <ãã¬ããã®ãã¹ã¯ã¼ã> tcp-mss auto
ã¤ã³ã¿ãã§ã¼ã¹ã®è¨å®:
# interface lan1 delete all
# interface pppoe0 ppp-configuration flets(ä¸è¨è¨å®ã«ã¤ãã¦ã¯å·¥å ´åºè·æã®ãã®ã使ç¨)
# interface lan0 add 192.168.0.1/24
# interface pppoe0 over lan1
ã«ã¼ãã£ã³ã°ã®è¨å®:
(å·¥å ´åºè·æã®è¨å®ããã®ã¾ã¾ä½¿ç¨)
# route add default pppoe0
NAPT(IP Masquerade)ã®è¨å®:
(å·¥å ´åºè·æã®è¨å®ããã®ã¾ã¾ä½¿ç¨)
# nat napt add private 192.168.0.0-192.168.255.255 interface pppoe0
DHCPã®è¨å®:
(å·¥å ´åºè·æã®è¨å®ããã®ã¾ã¾ä½¿ç¨)
# dhcp enable
# dhcp mode server
# dhcp interface lan0 enable
# dhcp interface lan0 expire 24
# dhcp interface lan0 pool 192.168.0.2 253
# dhcp interface lan0 dns add 192.168.0.1
# dns forwarder enable
# dns forwarder add ipcp
ãã¹ã¯ã¼ãã®è¨å®:
# password admin
(æ°ãã¹ã¯ã¼ããè¨å®)
# password user
(æ°ãã¹ã¯ã¼ããè¨å®)
sshã®è¨å®:
# sshd enable
ãã£ã«ã¿ã®è¨å®:
filter add manage_telnet interface pppoe0 direction in protocol tcp dstport 23 action block
filter add manage_ssh interface pppoe0 direction in protocol tcp dstport 22 action block
ãããã¯ã¼ã¯ã®æ¥ç¶ç¢ºèª
PPPoEã®æ¥ç¶ç¶æ³ã確èª:
# show status ppp pppoe0
Interface: pppoe0
LCP state: opened
IPCP state: opened
IPv6CP state: stopped
BCP state: initial
LCP negotiated options:
magic number 0xaadd9b51
IPCP negotiated options:
address
primary dns address
secondary dns address
IPv6CP negotiated options:
none
BCP negotiated options:
none
keepalive: 30 seconds interval
ã¤ã³ã¿ãã§ã¼ã¹ã確èª:
# show status interface pppoe0
interface pppoe0:
Description=""
Status=LCP up (opened), administratively up
MTU=1454
LastChange=2001/01/01 09:05:00
Ipkts=2710248, Ierrs=0, Opkts=2555103, Oerrs=3, Colls=0
InOctets=276659337, OutOctets=614907355, InDrops=0, OutDiscards=3
InMulticastPkts=0, OutMulticastPkts=0
InUnknownProtos=0
IP address=a.b.c.d --> w.x.y.z netmask=255.255.255.255
IPv6 address=fe80::2e0:4dff:fe0d:206%pppoe0 --> :: prefixlen=64
ã«ã¼ãã£ã³ã°ãã¼ãã«ã確èª:
# show status route
Flags: C - Connected, M - Miscellaneous, O - OSPF, R - RIP, S - Static
* - System route, ! - inconsistentDestination Gateway Interface Flags Dist.
default pppoe0 pppoe0 S* 1
127.0.0.0/8 loopback loopback C* 0
w.x.y.z/32 pppoe0 pppoe0 C* 0
a.b.c.d 127.0.0.1 loopback M* -
224.0.0.0/4 127.0.0.1 loopback M* -(w.x.y.z/32 㯠ãã¬ãã POI ã® Point-To-Point ã¢ãã¬ã¹)
(a.b.c.d 㯠ãã¬ããã§å²ãå½ã¦ãããã¢ãã¬ã¹)
pppoeã®æ¥ç¶ç¶æ³ã "show status ppp pppoe0" ã§ç¢ºèªã§ããã®ã§åãããããã§ããã
ä»é²: VMware Player ã§è¤æ°ã¤ã³ã¿ãã§ã¼ã¹ãå©ç¨ããã«ã¯
VMware Player ã使ãå ´åã¯ãé常ã®ã¤ã³ã¹ãã¼ã«ãããã ãã§ã¯è¤æ°ã®ã¤ã³ã¿ãã§ã¼ã¹ãæ±ãã¾ããã以ä¸ã®ãããªæé ã§è¨å®ãããå¿ è¦ãããã¾ãã
vmnetcfg.exe ãã¤ã³ã¹ãã¼ã«
ã³ãã³ãããã³ãããã VMware Player ã®ã¤ã³ã¹ãã¼ã©ãå®è¡ãããã¡ã¤ã«ãå±éãã
C:\> VMware-player-3.1.0-261024.exe /e C:\tmp\VMwarePlayer3
- å±éããããã¡ã¤ã«ã®ä¸ã« network.cab ãã¡ã¤ã«ãããã®ã§ããããããã«å±éãã㨠vmnetcfg.exe ãåãåºãã
- åãåºãã vmnetcfg.exe ã¯é©å½ãªãã£ã¬ã¯ããªã«ã³ãã¼ãã¦ãã
- vmnetcfg.exe ãå®è¡ããã¨ãVMwareãããã¯ã¼ã¯ã®è¨å®ãã§ãã
ã«ã¹ã¿ã ãããã¯ã¼ã¯ã®è¨å®
- vmnetcfg.exe ãå®è¡ãããã¨ã§ VMnet* ãè¨å®ãããã¨ãã§ããããã«ãªã£ã
- ä½ããGUIä¸ãã㯠VMnet* ãæå®ãããã¨ãã§ããªãã®ã§ .vmxãã¡ã¤ã«ãç´æ¥ç·¨éãã¦æ¸ãæããå¿ è¦ããã
seilx86.vmx è¨å®å¤æ´ä¾:
ethernet0.connectionType = "custom"
ethernet0.vnet = "VMnet2"
ethernet1.connectionType = "custom"
ethernet1.vnet = "VMnet3"
ethernet2.connectionType = "custom"
ethernet2.vnet = "VMnet4"