前回設定した Cisco ルーター 841M を使用して、Oracle Cloud Infrastructure (OCI) へ冗長化された2つの Static Route (静的ルート)のSite-to-Site VPN (IPSec) Tunnel を設定し、1つの IPsec Tunnel が Down しても通信が継続できることを確認してみてみます。

■ 構成図

前回、BGPで設定した Cisco ルーター 841M を使用し、今回は、BGP から Static Routeへ変更して動作確認をします。

■ 静的ルート変更

● OCI側設定

1) OCI IPSec 画面

対象のIPSec Connectionを選択し、[Edit] をクリック

2) Edit IPSec Connection画面

[Routes to your On-Premises Network] へ VCNへ通知するオンプレミスCIDR を設定し、[Save Changes]をクリック

3) Tunnel画面

2つのTunnel画面で、[Edit] をクリック

4) Edit Tunnel画面

変更箇所は一つ、[Routing Type]を 'Static Route' へ変更し、[Save Changes]をクリック

● CPE側設定

1) BGP設定消去

C841M(config)#no router bgp 65000

2) 静的ルート設定

OCI側CIDR 10.0.0.0/16 が Tunnel1 と Tunnel2 を通じるようにスタティック・ルートを設定

C841M(config)#ip route 10.0.0.0 255.255.0.0 Tunnel1
C841M(config)#ip route 10.0.0.0 255.255.0.0 Tunnel2

■ IPSec 正常確認

● OCI側正常確認

1) IPSec確認

各IPSec Tunnel の Status が　Active であること確認

2) ルート情報確認

2つのIPSec Tunnelの内 Rute Status の 1つが 'Active' 別のものは 'Confrict であることを確認
※ ECMPを有効にすると重複RouteをActive-Activeにすることができます。

● オンプレミス側正常確認

1) IPSec確認

各IPSec Tunnel の Status が　UP-ACTIVE であること確認

C841M#show crypto session
Crypto session current status

Interface: Tunnel11
Profile: oracle-vpn-140.204.100.101
Session status: UP-ACTIVE
Peer: 140.204.100.101 port 500
  Session ID: 1914
  IKEv2 SA: local 100.100.100.101/500 remote 140.204.100.101/500 Active
  IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0
        Active SAs: 2, origin: crypto map

Interface: Tunnel12
Profile: oracle-vpn-140.204.100.102
Session status: UP-ACTIVE
Peer: 140.204.100.102 port 500
  Session ID: 1790
  IKEv2 SA: local 100.100.100.101/500 remote 140.204.100.102/500 Active
  IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0
        Active SAs: 2, origin: crypto map

2) ルート情報確認

Tunnel1 と Tunnel2 のルートがあることを確認

C841M#show ip route
	Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
		D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
		N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
		E1 - OSPF external type 1, E2 - OSPF external type 2
		i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
		ia - IS-IS inter area, * - candidate default, U - per-user static route
		o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
		a - application route
		+ - replicated route, % - next hop override, p - overrides from PfR

	Gateway of last resort is 0.0.0.0 to network 0.0.0.0

	S*    0.0.0.0/0 is directly connected, Dialer1
		10.0.0.0/16 is subnetted, 1 subnets
	S        10.0.0.0/16 is directly connected, Tunnel1
						is directly connected, Tunnel2
	・・・
		192.168.254.0/24 is variably subnetted, 4 subnets, 2 masks
	C        192.168.254.100/30 is directly connected, Tunnel1
	L        192.168.254.101/32 is directly connected, Tunnel1
	C        192.168.254.104/30 is directly connected, Tunnel2
	L        192.168.254.105/32 is directly connected, Tunnel2

■ IPSec Tunnel 停止

● Ping疎通確認(IPSec Tunnel停止前)

pingを実行して、tunnel1を停止した時にどうなるのか確認

onp-inst01:~ user$ ping 10.0.0.2
	PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data.
	64 bytes from 10.0.0.2: icmp_seq=1 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=2 ttl=60 time=129 ms
	64 bytes from 10.0.0.2: icmp_seq=3 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=4 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=5 ttl=60 time=145 ms

● CPE側 Tunnel1停止

1) tunnel1 停止

C841M#configure terminal
	Enter configuration commands, one per line.  End with CNTL/Z.
C841M(config)#interface tunnel 1
C841M(config-if)#shutdown

2) IPSec tunnel1 DOWN確認

C841M#show crypto session
Crypto session current status

Interface: Tunnel12
Profile: oracle-vpn-140.204.100.102
Session status: UP-ACTIVE
Peer: 140.204.100.102 port 500
  Session ID: 1790
  IKEv2 SA: local 100.100.100.101/500 remote 140.204.100.102/500 Active
  IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0
        Active SAs: 2, origin: crypto map

Interface: Tunnel11
Profile: oracle-vpn-140.204.100.101
Session status: DOWN-NEGOTIATING
Peer: 140.204.100.101 port 500
  Session ID: 1914
  IKEv2 SA: local 100.100.100.101/500 remote 140.204.100.101/500 Active

3) Route情報確認

Tunnel1 のルートがなくなり、Tunnel2のルートのみになっていることを確認

C841M#show ip route
	Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
		D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
		N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
		E1 - OSPF external type 1, E2 - OSPF external type 2
		i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
		ia - IS-IS inter area, * - candidate default, U - per-user static route
		o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
		a - application route
		+ - replicated route, % - next hop override, p - overrides from PfR

	Gateway of last resort is 0.0.0.0 to network 0.0.0.0

	S*    0.0.0.0/0 is directly connected, Dialer1
		10.0.0.0/16 is subnetted, 1 subnets
	S        10.0.0.0/16 is directly connected, Tunnel2
	・・・
		192.168.254.0/24 is variably subnetted, 4 subnets, 2 masks
	C        192.168.254.100/30 is directly connected, Tunnel1
	L        192.168.254.101/32 is directly connected, Tunnel1
	C        192.168.254.104/30 is directly connected, Tunnel2
	L        192.168.254.105/32 is directly connected, Tunnel2

● OCI側 Tunnel01停止確認

1) IPsec Tunnel01 Down確認

2) Route確認

Downした IPsec Tunnel01 のルートが無くなり、Tunnel02 の Rute Status が Active になっていることを確認

● Ping疎通確認(IPSec Tunnel停止中)

特にエラーでてないことを確認

onp-inst01:~ user$ ping 10.0.0.2
	PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data.
	64 bytes from 10.0.0.2: icmp_seq=1 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=2 ttl=60 time=129 ms
	64 bytes from 10.0.0.2: icmp_seq=3 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=4 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=5 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=6 ttl=60 time=133 ms
	64 bytes from 10.0.0.2: icmp_seq=7 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=8 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=9 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=10 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=11 ttl=60 time=139 ms
	64 bytes from 10.0.0.2: icmp_seq=12 ttl=60 time=125 ms
	64 bytes from 10.0.0.2: icmp_seq=13 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=14 ttl=60 time=133 ms
	64 bytes from 10.0.0.2: icmp_seq=15 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=16 ttl=60 time=122 ms
	64 bytes from 10.0.0.2: icmp_seq=17 ttl=60 time=134 ms
	64 bytes from 10.0.0.2: icmp_seq=18 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=19 ttl=60 time=121 ms
	64 bytes from 10.0.0.2: icmp_seq=20 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=21 ttl=60 time=133 ms
	64 bytes from 10.0.0.2: icmp_seq=22 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=23 ttl=60 time=144 ms
	64 bytes from 10.0.0.2: icmp_seq=24 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=25 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=26 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=27 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=28 ttl=60 time=126 ms
	64 bytes from 10.0.0.2: icmp_seq=29 ttl=60 time=126 ms
	64 bytes from 10.0.0.2: icmp_seq=30 ttl=60 time=128 ms
	64 bytes from 10.0.0.2: icmp_seq=31 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=32 ttl=60 time=134 ms
	64 bytes from 10.0.0.2: icmp_seq=33 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=34 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=35 ttl=60 time=118 ms
	64 bytes from 10.0.0.2: icmp_seq=36 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=37 ttl=60 time=133 ms
	64 bytes from 10.0.0.2: icmp_seq=38 ttl=60 time=123 ms
	64 bytes from 10.0.0.2: icmp_seq=46 ttl=60 time=137 ms
	64 bytes from 10.0.0.2: icmp_seq=47 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=48 ttl=60 time=135 ms
	64 bytes from 10.0.0.2: icmp_seq=49 ttl=60 time=123 ms
	64 bytes from 10.0.0.2: icmp_seq=50 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=51 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=52 ttl=60 time=130 ms
	64 bytes from 10.0.0.2: icmp_seq=53 ttl=60 time=125 ms
	64 bytes from 10.0.0.2: icmp_seq=54 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=55 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=56 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=57 ttl=60 time=135 ms
	64 bytes from 10.0.0.2: icmp_seq=58 ttl=60 time=129 ms
	64 bytes from 10.0.0.2: icmp_seq=59 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=60 ttl=60 time=123 ms

■ 切り戻し

● CPE側 Tunnel1起動

1）Tunnel1 起動

C841M#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.

C841M(config)#interface tunnel 111
C841M(config-if)#no shutdown

2) IPSec確認

停止した Tunnel1 が DownsからUP-ACTIVEへ変わったことを確認

C841M#show crypto session
Crypto session current status

Interface: Tunnel2
Profile: oracle-vpn-140.204.100.102
Session status: UP-ACTIVE
Peer: 140.204.100.102 port 500
  Session ID: 1790
  IKEv2 SA: local 100.100.100.101/500 remote 140.204.100.102/500 Active
  IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0
        Active SAs: 2, origin: crypto map

Interface: Tunnel1
Profile: oracle-vpn-140.204.100.101
Session status: UP-ACTIVE
Peer: 140.204.100.101 port 500
  Session ID: 1914
  IKEv2 SA: local 100.100.100.101/500 remote 140.204.100.101/500 Active
  IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0
        Active SAs: 2, origin: crypto map
・・・

3) Route確認

C841M#show ip route
	Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
		D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
		N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
		E1 - OSPF external type 1, E2 - OSPF external type 2
		i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
		ia - IS-IS inter area, * - candidate default, U - per-user static route
		o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
		a - application route
		+ - replicated route, % - next hop override, p - overrides from PfR

	Gateway of last resort is 0.0.0.0 to network 0.0.0.0

	S*    0.0.0.0/0 is directly connected, Dialer1
		10.0.0.0/16 is subnetted, 1 subnets
	S        10.0.0.0/16 is directly connected, Tunnel1
						is directly connected, Tunnel2
	・・・
		192.168.254.0/24 is variably subnetted, 4 subnets, 2 masks
	C        192.168.254.100/30 is directly connected, Tunnel1
	L        192.168.254.101/32 is directly connected, Tunnel1
	C        192.168.254.104/30 is directly connected, Tunnel2
	L        192.168.254.105/32 is directly connected, Tunnel2

● Ping疎通確認(IPSec Tunnel切り戻し後)

特にエラーが出ていないことを確認

onp-inst01:~ user$ ping 10.0.0.2
	PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data.
	64 bytes from 10.0.0.2: icmp_seq=1 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=2 ttl=60 time=129 ms
	64 bytes from 10.0.0.2: icmp_seq=3 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=4 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=5 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=6 ttl=60 time=133 ms
	64 bytes from 10.0.0.2: icmp_seq=7 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=8 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=9 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=10 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=11 ttl=60 time=139 ms
	64 bytes from 10.0.0.2: icmp_seq=12 ttl=60 time=125 ms
	64 bytes from 10.0.0.2: icmp_seq=13 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=14 ttl=60 time=133 ms
	64 bytes from 10.0.0.2: icmp_seq=15 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=16 ttl=60 time=122 ms
	64 bytes from 10.0.0.2: icmp_seq=17 ttl=60 time=134 ms
	64 bytes from 10.0.0.2: icmp_seq=18 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=19 ttl=60 time=121 ms
	64 bytes from 10.0.0.2: icmp_seq=20 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=21 ttl=60 time=133 ms
	64 bytes from 10.0.0.2: icmp_seq=22 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=23 ttl=60 time=144 ms
	64 bytes from 10.0.0.2: icmp_seq=24 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=25 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=26 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=27 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=28 ttl=60 time=126 ms
	64 bytes from 10.0.0.2: icmp_seq=29 ttl=60 time=126 ms
	64 bytes from 10.0.0.2: icmp_seq=30 ttl=60 time=128 ms
	64 bytes from 10.0.0.2: icmp_seq=31 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=32 ttl=60 time=134 ms
	64 bytes from 10.0.0.2: icmp_seq=33 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=34 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=35 ttl=60 time=118 ms
	64 bytes from 10.0.0.2: icmp_seq=36 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=37 ttl=60 time=133 ms
	64 bytes from 10.0.0.2: icmp_seq=38 ttl=60 time=123 ms
	64 bytes from 10.0.0.2: icmp_seq=46 ttl=60 time=137 ms
	64 bytes from 10.0.0.2: icmp_seq=47 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=48 ttl=60 time=135 ms
	64 bytes from 10.0.0.2: icmp_seq=49 ttl=60 time=123 ms
	64 bytes from 10.0.0.2: icmp_seq=50 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=51 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=52 ttl=60 time=130 ms
	64 bytes from 10.0.0.2: icmp_seq=53 ttl=60 time=125 ms
	64 bytes from 10.0.0.2: icmp_seq=54 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=55 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=56 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=57 ttl=60 time=135 ms
	64 bytes from 10.0.0.2: icmp_seq=58 ttl=60 time=129 ms
	64 bytes from 10.0.0.2: icmp_seq=59 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=60 ttl=60 time=123 ms
	64 bytes from 10.0.0.2: icmp_seq=61 ttl=60 time=123 ms
	64 bytes from 10.0.0.2: icmp_seq=62 ttl=60 time=131 ms
	64 bytes from 10.0.0.2: icmp_seq=63 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=64 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=65 ttl=60 time=154 ms
	64 bytes from 10.0.0.2: icmp_seq=66 ttl=60 time=116 ms
	64 bytes from 10.0.0.2: icmp_seq=67 ttl=60 time=132 ms
	64 bytes from 10.0.0.2: icmp_seq=68 ttl=60 time=134 ms
	64 bytes from 10.0.0.2: icmp_seq=69 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=70 ttl=60 time=129 ms
	64 bytes from 10.0.0.2: icmp_seq=71 ttl=60 time=136 ms
	64 bytes from 10.0.0.2: icmp_seq=72 ttl=60 time=139 ms
	64 bytes from 10.0.0.2: icmp_seq=73 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=74 ttl=60 time=123 ms
	64 bytes from 10.0.0.2: icmp_seq=75 ttl=60 time=144 ms
	64 bytes from 10.0.0.2: icmp_seq=76 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=77 ttl=60 time=127 ms
	64 bytes from 10.0.0.2: icmp_seq=78 ttl=60 time=134 ms
	64 bytes from 10.0.0.2: icmp_seq=79 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=80 ttl=60 time=135 ms
	64 bytes from 10.0.0.2: icmp_seq=81 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=82 ttl=60 time=144 ms
	64 bytes from 10.0.0.2: icmp_seq=83 ttl=60 time=151 ms
	64 bytes from 10.0.0.2: icmp_seq=84 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=85 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=86 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=87 ttl=60 time=127 ms
	64 bytes from 10.0.0.2: icmp_seq=88 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=89 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=90 ttl=60 time=137 ms
	64 bytes from 10.0.0.2: icmp_seq=91 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=92 ttl=60 time=131 ms
	64 bytes from 10.0.0.2: icmp_seq=93 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=94 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=95 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=96 ttl=60 time=139 ms
	64 bytes from 10.0.0.2: icmp_seq=97 ttl=60 time=132 ms
	64 bytes from 10.0.0.2: icmp_seq=98 ttl=60 time=128 ms
	64 bytes from 10.0.0.2: icmp_seq=100 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=101 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=102 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=103 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=104 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=105 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=106 ttl=60 time=139 ms
	64 bytes from 10.0.0.2: icmp_seq=107 ttl=60 time=151 ms
	64 bytes from 10.0.0.2: icmp_seq=108 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=110 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=111 ttl=60 time=151 ms
	64 bytes from 10.0.0.2: icmp_seq=112 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=113 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=114 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=115 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=116 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=117 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=118 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=119 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=120 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=121 ttl=60 time=144 ms
	64 bytes from 10.0.0.2: icmp_seq=122 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=123 ttl=60 time=137 ms
	64 bytes from 10.0.0.2: icmp_seq=124 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=125 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=126 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=127 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=128 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=129 ttl=60 time=151 ms
	64 bytes from 10.0.0.2: icmp_seq=130 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=131 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=132 ttl=60 time=122 ms
	64 bytes from 10.0.0.2: icmp_seq=133 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=134 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=135 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=136 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=138 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=140 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=141 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=142 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=143 ttl=60 time=151 ms
	64 bytes from 10.0.0.2: icmp_seq=144 ttl=60 time=144 ms
	64 bytes from 10.0.0.2: icmp_seq=146 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=147 ttl=60 time=130 ms
	64 bytes from 10.0.0.2: icmp_seq=148 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=149 ttl=60 time=129 ms
	64 bytes from 10.0.0.2: icmp_seq=150 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=151 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=152 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=153 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=154 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=155 ttl=60 time=128 ms
	64 bytes from 10.0.0.2: icmp_seq=156 ttl=60 time=125 ms
	64 bytes from 10.0.0.2: icmp_seq=157 ttl=60 time=128 ms
	64 bytes from 10.0.0.2: icmp_seq=158 ttl=60 time=127 ms
	64 bytes from 10.0.0.2: icmp_seq=159 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=160 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=161 ttl=60 time=151 ms
	64 bytes from 10.0.0.2: icmp_seq=162 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=163 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=164 ttl=60 time=139 ms
	64 bytes from 10.0.0.2: icmp_seq=165 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=166 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=167 ttl=60 time=124 ms
	64 bytes from 10.0.0.2: icmp_seq=168 ttl=60 time=136 ms
	64 bytes from 10.0.0.2: icmp_seq=169 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=170 ttl=60 time=136 ms
	64 bytes from 10.0.0.2: icmp_seq=171 ttl=60 time=134 ms
	64 bytes from 10.0.0.2: icmp_seq=172 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=173 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=174 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=175 ttl=60 time=135 ms
	64 bytes from 10.0.0.2: icmp_seq=176 ttl=60 time=139 ms
	64 bytes from 10.0.0.2: icmp_seq=177 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=178 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=179 ttl=60 time=134 ms
	64 bytes from 10.0.0.2: icmp_seq=180 ttl=60 time=131 ms
	64 bytes from 10.0.0.2: icmp_seq=181 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=182 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=183 ttl=60 time=151 ms
	64 bytes from 10.0.0.2: icmp_seq=184 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=185 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=186 ttl=60 time=121 ms
	64 bytes from 10.0.0.2: icmp_seq=187 ttl=60 time=125 ms
	64 bytes from 10.0.0.2: icmp_seq=188 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=189 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=190 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=191 ttl=60 time=139 ms
	64 bytes from 10.0.0.2: icmp_seq=192 ttl=60 time=119 ms
	64 bytes from 10.0.0.2: icmp_seq=193 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=194 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=195 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=196 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=197 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=198 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=199 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=200 ttl=60 time=129 ms

■ 参考

● OCI Documents
　・CPE Configuration
　・CPE Configuration: Cisco IOS
　・Connectivity Redundancy Guide

● CIsco Documents
　・Cisco 841M J シリーズ
　・Cisco 841M ドキュメント
　・Cisco 800M データシート
　・Cisco Start ユーザサイトファームウェアダウンロード
　・BGPルートがアドバタイズされない場合のトラブルシューティング

● infraexpert.com
・BGP AS_PATH - Cisco Config
・route-map - redistribute
・BGP WEIGHT - Cisco Config

● Blog
・Cisco 841M: 初期設定してインターネット接続してみてみた

Oracle Cloud: Cisco 841M ルーターを Static Route で IPSec VPN接続してみてみた

■ 構成図

■ 静的ルート変更

● OCI側設定

1) OCI IPSec 画面

2) Edit IPSec Connection画面

3) Tunnel画面

4) Edit Tunnel画面

● CPE側設定

1) BGP設定消去

2) 静的ルート設定

■ IPSec 正常確認

● OCI側正常確認

1) IPSec確認

2) ルート情報確認

● オンプレミス側正常確認

1) IPSec確認

2) ルート情報確認

■ IPSec Tunnel 停止

● Ping疎通確認(IPSec Tunnel停止前)

● CPE側 Tunnel1停止

1) tunnel1 停止

2) IPSec tunnel1 DOWN確認

3) Route情報確認

● OCI側 Tunnel01停止確認

1) IPsec Tunnel01 Down確認

2) Route確認

● Ping疎通確認(IPSec Tunnel停止中)

■ 切り戻し

● CPE側 Tunnel1起動

1）Tunnel1 起動

2) IPSec確認

3) Route確認

● Ping疎通確認(IPSec Tunnel切り戻し後)

■ 参考