Oracle Cloud: Cisco 841M ルーターを Static Route で IPSec VPN接続してみてみた

[前回設定した Cisco ルーター 841M](https://qiita.com/shirok/items/1542af8efcd4d94c4b3a) を使用して、Oracle Cloud Infrastructure (OCI) へ 冗長化された2つの Static Route (静的ルート)のSite-to-Site VPN (IPSec) Tunnel を設定し、1つの IPsec Tunnel が Down しても通信が継続できることを確認してみてみます。

# ■ 構成図
![Static構成.jpg](https://qiita-image-store.s3.ap-northeast-1.amazonaws.com/0/109087/aa4457de-b441-a0f5-d930-011130fc7dc7.jpeg)
前回、BGPで設定した Cisco ルーター 841M を使用し、今回は、BGP から Static Routeへ変更して動作確認をします。

https://qiita.com/shirok/items/1542af8efcd4d94c4b3a



# ■ 静的ルート変更
## ● OCI側設定
### 1) OCI IPSec 画面
対象のIPSec Connectionを選択し、[Edit] をクリック
![01Tunnel静的変更01.jpg](https://qiita-image-store.s3.ap-northeast-1.amazonaws.com/0/109087/22dcc5f4-7992-0fe9-534b-d88fa8c838e9.jpeg)


### 2) Edit IPSec Connection画面
[Routes to your On-Premises Network] へ VCNへ通知するオンプレミスCIDR を設定し、[Save Changes]をクリック
![01Tunnel静的変更02.jpg](https://qiita-image-store.s3.ap-northeast-1.amazonaws.com/0/109087/14f3e4a2-2b48-560d-89b5-b174caf688ec.jpeg)

### 3) Tunnel画面
2つのTunnel画面で、[Edit] をクリック
![01Tunnel静的変更03.jpg](https://qiita-image-store.s3.ap-northeast-1.amazonaws.com/0/109087/cb96d570-2d4c-ba6e-c602-6478ac6db328.jpeg)

### 4) Edit Tunnel画面
変更箇所は一つ、[Routing Type]を 'Static Route' へ変更し、[Save Changes]をクリック
![01Tunnel静的変更04.jpg](https://qiita-image-store.s3.ap-northeast-1.amazonaws.com/0/109087/dc0aa597-e9ab-5d45-7127-cb444341f2f1.jpeg)


## ● CPE側設定
### 1) BGP設定消去

```
C841M(config)#no router bgp 65000
```

### 2) 静的ルート設定
OCI側CIDR 10.0.0.0/16 が Tunnel1 と Tunnel2 を通じるように スタティック・ルートを設定

```
C841M(config)#ip route 10.0.0.0 255.255.0.0 Tunnel1
C841M(config)#ip route 10.0.0.0 255.255.0.0 Tunnel2
```


# ■ IPSec 正常確認
## ● OCI側正常確認
### 1) IPSec確認
各IPSec Tunnel の Status が　Active であること確認
![01Tunnel静的変更完了05.jpg](https://qiita-image-store.s3.ap-northeast-1.amazonaws.com/0/109087/26c1cb4c-de69-2e69-6250-bbb10bd1a8fb.jpeg)



### 2) ルート情報確認
2つのIPSec Tunnelの内 Rute Status の 1つが 'Active' 別のものは 'Confrict であることを確認
※ ECMPを有効にすると重複RouteをActive-Activeにすることができます。
![02_DRGルート表_正常.jpg](https://qiita-image-store.s3.ap-northeast-1.amazonaws.com/0/109087/11b1ab3f-5012-78ac-5676-1266203cbaa3.jpeg)

## ● オンプレミス側正常確認

### 1) IPSec確認
各IPSec Tunnel の Status が　UP-ACTIVE であること確認

```
C841M#show crypto session
Crypto session current status

Interface: Tunnel11
Profile: oracle-vpn-140.204.100.101
Session status: UP-ACTIVE
Peer: 140.204.100.101 port 500
  Session ID: 1914
  IKEv2 SA: local 100.100.100.101/500 remote 140.204.100.101/500 Active
  IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0
        Active SAs: 2, origin: crypto map

Interface: Tunnel12
Profile: oracle-vpn-140.204.100.102
Session status: UP-ACTIVE
Peer: 140.204.100.102 port 500
  Session ID: 1790
  IKEv2 SA: local 100.100.100.101/500 remote 140.204.100.102/500 Active
  IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0
        Active SAs: 2, origin: crypto map
```




### 2) ルート情報確認
Tunnel1 と Tunnel2 の ルートがあることを確認

```
C841M#show ip route
	Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
		D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
		N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
		E1 - OSPF external type 1, E2 - OSPF external type 2
		i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
		ia - IS-IS inter area, * - candidate default, U - per-user static route
		o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
		a - application route
		+ - replicated route, % - next hop override, p - overrides from PfR

	Gateway of last resort is 0.0.0.0 to network 0.0.0.0

	S*    0.0.0.0/0 is directly connected, Dialer1
		10.0.0.0/16 is subnetted, 1 subnets
	S        10.0.0.0/16 is directly connected, Tunnel1
						is directly connected, Tunnel2
	・・・
		192.168.254.0/24 is variably subnetted, 4 subnets, 2 masks
	C        192.168.254.100/30 is directly connected, Tunnel1
	L        192.168.254.101/32 is directly connected, Tunnel1
	C        192.168.254.104/30 is directly connected, Tunnel2
	L        192.168.254.105/32 is directly connected, Tunnel2
```


# ■ IPSec Tunnel 停止

## ● Ping疎通確認(IPSec Tunnel停止前)

pingを実行して、tunnel1を停止した時にどうなるのか確認

```
onp-inst01:~ user$ ping 10.0.0.2
	PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data.
	64 bytes from 10.0.0.2: icmp_seq=1 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=2 ttl=60 time=129 ms
	64 bytes from 10.0.0.2: icmp_seq=3 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=4 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=5 ttl=60 time=145 ms
```


## ● CPE側 Tunnel1停止


### 1) tunnel1 停止

```
C841M#configure terminal
	Enter configuration commands, one per line.  End with CNTL/Z.
C841M(config)#interface tunnel 1
C841M(config-if)#shutdown
```


### 2) IPSec tunnel1 DOWN確認

```
C841M#show crypto session
Crypto session current status

Interface: Tunnel12
Profile: oracle-vpn-140.204.100.102
Session status: UP-ACTIVE
Peer: 140.204.100.102 port 500
  Session ID: 1790
  IKEv2 SA: local 100.100.100.101/500 remote 140.204.100.102/500 Active
  IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0
        Active SAs: 2, origin: crypto map

Interface: Tunnel11
Profile: oracle-vpn-140.204.100.101
Session status: DOWN-NEGOTIATING
Peer: 140.204.100.101 port 500
  Session ID: 1914
  IKEv2 SA: local 100.100.100.101/500 remote 140.204.100.101/500 Active
```

### 3) Route情報確認
Tunnel1 のルートがなくなり、Tunnel2のルートのみになっていることを確認

```
C841M#show ip route
	Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
		D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
		N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
		E1 - OSPF external type 1, E2 - OSPF external type 2
		i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
		ia - IS-IS inter area, * - candidate default, U - per-user static route
		o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
		a - application route
		+ - replicated route, % - next hop override, p - overrides from PfR

	Gateway of last resort is 0.0.0.0 to network 0.0.0.0

	S*    0.0.0.0/0 is directly connected, Dialer1
		10.0.0.0/16 is subnetted, 1 subnets
	S        10.0.0.0/16 is directly connected, Tunnel2
	・・・
		192.168.254.0/24 is variably subnetted, 4 subnets, 2 masks
	C        192.168.254.100/30 is directly connected, Tunnel1
	L        192.168.254.101/32 is directly connected, Tunnel1
	C        192.168.254.104/30 is directly connected, Tunnel2
	L        192.168.254.105/32 is directly connected, Tunnel2
```

## ● OCI側 Tunnel01停止確認
### 1) IPsec Tunnel01 Down確認
![04Tunnel01ダウン.jpg](https://qiita-image-store.s3.ap-northeast-1.amazonaws.com/0/109087/8c599260-0c6c-1862-64cd-c0fa23827d9a.jpeg)


### 2) Route確認
Downした IPsec Tunnel01 のルートが無くなり、Tunnel02 の Rute Status が Active になっていることを確認

![03_DRGルート表_Tunnel02ダウン.jpg](https://qiita-image-store.s3.ap-northeast-1.amazonaws.com/0/109087/d8a35206-fd0f-ca5d-c2ac-8fd1e14bafac.jpeg)




## ● Ping疎通確認(IPSec Tunnel停止中)

特にエラーでてないことを確認

```
onp-inst01:~ user$ ping 10.0.0.2
	PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data.
	64 bytes from 10.0.0.2: icmp_seq=1 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=2 ttl=60 time=129 ms
	64 bytes from 10.0.0.2: icmp_seq=3 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=4 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=5 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=6 ttl=60 time=133 ms
	64 bytes from 10.0.0.2: icmp_seq=7 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=8 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=9 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=10 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=11 ttl=60 time=139 ms
	64 bytes from 10.0.0.2: icmp_seq=12 ttl=60 time=125 ms
	64 bytes from 10.0.0.2: icmp_seq=13 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=14 ttl=60 time=133 ms
	64 bytes from 10.0.0.2: icmp_seq=15 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=16 ttl=60 time=122 ms
	64 bytes from 10.0.0.2: icmp_seq=17 ttl=60 time=134 ms
	64 bytes from 10.0.0.2: icmp_seq=18 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=19 ttl=60 time=121 ms
	64 bytes from 10.0.0.2: icmp_seq=20 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=21 ttl=60 time=133 ms
	64 bytes from 10.0.0.2: icmp_seq=22 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=23 ttl=60 time=144 ms
	64 bytes from 10.0.0.2: icmp_seq=24 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=25 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=26 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=27 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=28 ttl=60 time=126 ms
	64 bytes from 10.0.0.2: icmp_seq=29 ttl=60 time=126 ms
	64 bytes from 10.0.0.2: icmp_seq=30 ttl=60 time=128 ms
	64 bytes from 10.0.0.2: icmp_seq=31 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=32 ttl=60 time=134 ms
	64 bytes from 10.0.0.2: icmp_seq=33 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=34 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=35 ttl=60 time=118 ms
	64 bytes from 10.0.0.2: icmp_seq=36 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=37 ttl=60 time=133 ms
	64 bytes from 10.0.0.2: icmp_seq=38 ttl=60 time=123 ms
	64 bytes from 10.0.0.2: icmp_seq=46 ttl=60 time=137 ms
	64 bytes from 10.0.0.2: icmp_seq=47 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=48 ttl=60 time=135 ms
	64 bytes from 10.0.0.2: icmp_seq=49 ttl=60 time=123 ms
	64 bytes from 10.0.0.2: icmp_seq=50 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=51 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=52 ttl=60 time=130 ms
	64 bytes from 10.0.0.2: icmp_seq=53 ttl=60 time=125 ms
	64 bytes from 10.0.0.2: icmp_seq=54 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=55 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=56 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=57 ttl=60 time=135 ms
	64 bytes from 10.0.0.2: icmp_seq=58 ttl=60 time=129 ms
	64 bytes from 10.0.0.2: icmp_seq=59 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=60 ttl=60 time=123 ms
```



# ■ 切り戻し
## ● CPE側 Tunnel1起動

### 1）Tunnel1 起動

```
C841M#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.

C841M(config)#interface tunnel 111
C841M(config-if)#no shutdown
```

### 2) IPSec確認
停止した Tunnel1 が DownsからUP-ACTIVEへ変わったことを確認

```
C841M#show crypto session
Crypto session current status

Interface: Tunnel2
Profile: oracle-vpn-140.204.100.102
Session status: UP-ACTIVE
Peer: 140.204.100.102 port 500
  Session ID: 1790
  IKEv2 SA: local 100.100.100.101/500 remote 140.204.100.102/500 Active
  IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0
        Active SAs: 2, origin: crypto map

Interface: Tunnel1
Profile: oracle-vpn-140.204.100.101
Session status: UP-ACTIVE
Peer: 140.204.100.101 port 500
  Session ID: 1914
  IKEv2 SA: local 100.100.100.101/500 remote 140.204.100.101/500 Active
  IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0
        Active SAs: 2, origin: crypto map
・・・
```

### 3) Route確認

```
C841M#show ip route
	Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
		D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
		N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
		E1 - OSPF external type 1, E2 - OSPF external type 2
		i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
		ia - IS-IS inter area, * - candidate default, U - per-user static route
		o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
		a - application route
		+ - replicated route, % - next hop override, p - overrides from PfR

	Gateway of last resort is 0.0.0.0 to network 0.0.0.0

	S*    0.0.0.0/0 is directly connected, Dialer1
		10.0.0.0/16 is subnetted, 1 subnets
	S        10.0.0.0/16 is directly connected, Tunnel1
						is directly connected, Tunnel2
	・・・
		192.168.254.0/24 is variably subnetted, 4 subnets, 2 masks
	C        192.168.254.100/30 is directly connected, Tunnel1
	L        192.168.254.101/32 is directly connected, Tunnel1
	C        192.168.254.104/30 is directly connected, Tunnel2
	L        192.168.254.105/32 is directly connected, Tunnel2
```



## ● Ping疎通確認(IPSec Tunnel切り戻し後)
特にエラーが出ていないことを確認


```
onp-inst01:~ user$ ping 10.0.0.2
	PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data.
	64 bytes from 10.0.0.2: icmp_seq=1 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=2 ttl=60 time=129 ms
	64 bytes from 10.0.0.2: icmp_seq=3 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=4 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=5 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=6 ttl=60 time=133 ms
	64 bytes from 10.0.0.2: icmp_seq=7 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=8 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=9 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=10 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=11 ttl=60 time=139 ms
	64 bytes from 10.0.0.2: icmp_seq=12 ttl=60 time=125 ms
	64 bytes from 10.0.0.2: icmp_seq=13 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=14 ttl=60 time=133 ms
	64 bytes from 10.0.0.2: icmp_seq=15 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=16 ttl=60 time=122 ms
	64 bytes from 10.0.0.2: icmp_seq=17 ttl=60 time=134 ms
	64 bytes from 10.0.0.2: icmp_seq=18 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=19 ttl=60 time=121 ms
	64 bytes from 10.0.0.2: icmp_seq=20 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=21 ttl=60 time=133 ms
	64 bytes from 10.0.0.2: icmp_seq=22 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=23 ttl=60 time=144 ms
	64 bytes from 10.0.0.2: icmp_seq=24 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=25 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=26 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=27 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=28 ttl=60 time=126 ms
	64 bytes from 10.0.0.2: icmp_seq=29 ttl=60 time=126 ms
	64 bytes from 10.0.0.2: icmp_seq=30 ttl=60 time=128 ms
	64 bytes from 10.0.0.2: icmp_seq=31 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=32 ttl=60 time=134 ms
	64 bytes from 10.0.0.2: icmp_seq=33 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=34 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=35 ttl=60 time=118 ms
	64 bytes from 10.0.0.2: icmp_seq=36 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=37 ttl=60 time=133 ms
	64 bytes from 10.0.0.2: icmp_seq=38 ttl=60 time=123 ms
	64 bytes from 10.0.0.2: icmp_seq=46 ttl=60 time=137 ms
	64 bytes from 10.0.0.2: icmp_seq=47 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=48 ttl=60 time=135 ms
	64 bytes from 10.0.0.2: icmp_seq=49 ttl=60 time=123 ms
	64 bytes from 10.0.0.2: icmp_seq=50 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=51 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=52 ttl=60 time=130 ms
	64 bytes from 10.0.0.2: icmp_seq=53 ttl=60 time=125 ms
	64 bytes from 10.0.0.2: icmp_seq=54 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=55 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=56 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=57 ttl=60 time=135 ms
	64 bytes from 10.0.0.2: icmp_seq=58 ttl=60 time=129 ms
	64 bytes from 10.0.0.2: icmp_seq=59 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=60 ttl=60 time=123 ms
	64 bytes from 10.0.0.2: icmp_seq=61 ttl=60 time=123 ms
	64 bytes from 10.0.0.2: icmp_seq=62 ttl=60 time=131 ms
	64 bytes from 10.0.0.2: icmp_seq=63 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=64 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=65 ttl=60 time=154 ms
	64 bytes from 10.0.0.2: icmp_seq=66 ttl=60 time=116 ms
	64 bytes from 10.0.0.2: icmp_seq=67 ttl=60 time=132 ms
	64 bytes from 10.0.0.2: icmp_seq=68 ttl=60 time=134 ms
	64 bytes from 10.0.0.2: icmp_seq=69 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=70 ttl=60 time=129 ms
	64 bytes from 10.0.0.2: icmp_seq=71 ttl=60 time=136 ms
	64 bytes from 10.0.0.2: icmp_seq=72 ttl=60 time=139 ms
	64 bytes from 10.0.0.2: icmp_seq=73 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=74 ttl=60 time=123 ms
	64 bytes from 10.0.0.2: icmp_seq=75 ttl=60 time=144 ms
	64 bytes from 10.0.0.2: icmp_seq=76 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=77 ttl=60 time=127 ms
	64 bytes from 10.0.0.2: icmp_seq=78 ttl=60 time=134 ms
	64 bytes from 10.0.0.2: icmp_seq=79 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=80 ttl=60 time=135 ms
	64 bytes from 10.0.0.2: icmp_seq=81 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=82 ttl=60 time=144 ms
	64 bytes from 10.0.0.2: icmp_seq=83 ttl=60 time=151 ms
	64 bytes from 10.0.0.2: icmp_seq=84 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=85 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=86 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=87 ttl=60 time=127 ms
	64 bytes from 10.0.0.2: icmp_seq=88 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=89 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=90 ttl=60 time=137 ms
	64 bytes from 10.0.0.2: icmp_seq=91 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=92 ttl=60 time=131 ms
	64 bytes from 10.0.0.2: icmp_seq=93 ttl=60 time=145 ms
	64 bytes from 10.0.0.2: icmp_seq=94 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=95 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=96 ttl=60 time=139 ms
	64 bytes from 10.0.0.2: icmp_seq=97 ttl=60 time=132 ms
	64 bytes from 10.0.0.2: icmp_seq=98 ttl=60 time=128 ms
	64 bytes from 10.0.0.2: icmp_seq=100 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=101 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=102 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=103 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=104 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=105 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=106 ttl=60 time=139 ms
	64 bytes from 10.0.0.2: icmp_seq=107 ttl=60 time=151 ms
	64 bytes from 10.0.0.2: icmp_seq=108 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=110 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=111 ttl=60 time=151 ms
	64 bytes from 10.0.0.2: icmp_seq=112 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=113 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=114 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=115 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=116 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=117 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=118 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=119 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=120 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=121 ttl=60 time=144 ms
	64 bytes from 10.0.0.2: icmp_seq=122 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=123 ttl=60 time=137 ms
	64 bytes from 10.0.0.2: icmp_seq=124 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=125 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=126 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=127 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=128 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=129 ttl=60 time=151 ms
	64 bytes from 10.0.0.2: icmp_seq=130 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=131 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=132 ttl=60 time=122 ms
	64 bytes from 10.0.0.2: icmp_seq=133 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=134 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=135 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=136 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=138 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=140 ttl=60 time=148 ms
	64 bytes from 10.0.0.2: icmp_seq=141 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=142 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=143 ttl=60 time=151 ms
	64 bytes from 10.0.0.2: icmp_seq=144 ttl=60 time=144 ms
	64 bytes from 10.0.0.2: icmp_seq=146 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=147 ttl=60 time=130 ms
	64 bytes from 10.0.0.2: icmp_seq=148 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=149 ttl=60 time=129 ms
	64 bytes from 10.0.0.2: icmp_seq=150 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=151 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=152 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=153 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=154 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=155 ttl=60 time=128 ms
	64 bytes from 10.0.0.2: icmp_seq=156 ttl=60 time=125 ms
	64 bytes from 10.0.0.2: icmp_seq=157 ttl=60 time=128 ms
	64 bytes from 10.0.0.2: icmp_seq=158 ttl=60 time=127 ms
	64 bytes from 10.0.0.2: icmp_seq=159 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=160 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=161 ttl=60 time=151 ms
	64 bytes from 10.0.0.2: icmp_seq=162 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=163 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=164 ttl=60 time=139 ms
	64 bytes from 10.0.0.2: icmp_seq=165 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=166 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=167 ttl=60 time=124 ms
	64 bytes from 10.0.0.2: icmp_seq=168 ttl=60 time=136 ms
	64 bytes from 10.0.0.2: icmp_seq=169 ttl=60 time=146 ms
	64 bytes from 10.0.0.2: icmp_seq=170 ttl=60 time=136 ms
	64 bytes from 10.0.0.2: icmp_seq=171 ttl=60 time=134 ms
	64 bytes from 10.0.0.2: icmp_seq=172 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=173 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=174 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=175 ttl=60 time=135 ms
	64 bytes from 10.0.0.2: icmp_seq=176 ttl=60 time=139 ms
	64 bytes from 10.0.0.2: icmp_seq=177 ttl=60 time=143 ms
	64 bytes from 10.0.0.2: icmp_seq=178 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=179 ttl=60 time=134 ms
	64 bytes from 10.0.0.2: icmp_seq=180 ttl=60 time=131 ms
	64 bytes from 10.0.0.2: icmp_seq=181 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=182 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=183 ttl=60 time=151 ms
	64 bytes from 10.0.0.2: icmp_seq=184 ttl=60 time=142 ms
	64 bytes from 10.0.0.2: icmp_seq=185 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=186 ttl=60 time=121 ms
	64 bytes from 10.0.0.2: icmp_seq=187 ttl=60 time=125 ms
	64 bytes from 10.0.0.2: icmp_seq=188 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=189 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=190 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=191 ttl=60 time=139 ms
	64 bytes from 10.0.0.2: icmp_seq=192 ttl=60 time=119 ms
	64 bytes from 10.0.0.2: icmp_seq=193 ttl=60 time=140 ms
	64 bytes from 10.0.0.2: icmp_seq=194 ttl=60 time=141 ms
	64 bytes from 10.0.0.2: icmp_seq=195 ttl=60 time=150 ms
	64 bytes from 10.0.0.2: icmp_seq=196 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=197 ttl=60 time=138 ms
	64 bytes from 10.0.0.2: icmp_seq=198 ttl=60 time=147 ms
	64 bytes from 10.0.0.2: icmp_seq=199 ttl=60 time=149 ms
	64 bytes from 10.0.0.2: icmp_seq=200 ttl=60 time=129 ms
```



# ■ 参考
**● OCI Documents**
　・[CPE Configuration](https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/configuringCPE.htm)
　・[CPE Configuration: Cisco IOS](https://docs.oracle.com/en-us/iaas/Content/Network/Reference/ciscoiosCPE.htm)
　・[Connectivity Redundancy Guide](https://docs.oracle.com/en-us/iaas/Content/Resources/Assets/whitepapers/connectivity-redundancy-guide.pdf)

**● CIsco Documents**
　・[Cisco 841M J シリーズ](https://www.cisco.com/c/ja_jp/solutions/small-business/on-premise/product-network/product-841mj.html)
　・[Cisco 841M ドキュメント](https://www.cisco.com/c/ja_jp/solutions/small-business/on-premise/product-network/product-841mj.html#~stickynav=4)
　・[Cisco 800M データシート](https://www.cisco.com/c/ja_jp/products/collateral/routers/800m-integrated-services-router-isr/datasheet-c78-732678.html)
　・[Cisco Start ユーザ サイトファームウェア ダウンロード](https://www.cisco.com/c/m/ja_jp/customer/cisco-start-user-site/download.html)
　・[BGPルートがアドバタイズされない場合のトラブルシューティング](https://www.cisco.com/c/ja_jp/support/docs/ip/border-gateway-protocol-bgp/19345-bgp-noad.html)

**● infraexpert.com**
・[BGP AS_PATH - Cisco Config](https://www.infraexpert.com/study/bgpz13.html)
・[route-map - redistribute](https://www.infraexpert.com/study/routecontrol11.html)
・[BGP WEIGHT - Cisco Config](https://www.infraexpert.com/study/bgpz25.html#:~:text=WEIGHT%E3%82%A2%E3%83%88%E3%83%AA%E3%83%93%E3%83%A5%E3%83%BC%E3%83%88%E3%81%AF%E3%80%81%E3%82%B7%E3%82%B9%E3%82%B3%E7%8B%AC%E8%87%AA,%E4%BD%BF%E7%94%A8%E3%81%95%E3%82%8C%E3%82%8B%E3%82%A2%E3%83%88%E3%83%AA%E3%83%93%E3%83%A5%E3%83%BC%E3%83%88%E3%81%A7%E3%81%99%E3%80%82&text=WEIGHT%E5%80%A4%E3%81%AE%E3%83%87%E3%83%95%E3%82%A9%E3%83%AB%E3%83%88%E3%81%AF,%E3%83%AB%E3%83%BC%E3%83%88%E3%81%AF%E3%80%8C%200%20%E3%80%8D%E3%81%A7%E3%81%99%E3%80%82)

**● Blog**
・[Cisco 841M: 初期設定してインターネット接続してみてみた](https://qiita.com/shirok/items/ec430ab16111193ac587)