上記の続き

現在の、下記設定では、インターネット接続ができません。
■営業所（非固定ＩＰ）の設定
ip route default gateway dhcp lan2
ip route 192.168.1.0/24 gateway tunnel 1
ip filter source-route on
ip lan1 address 192.168.2.100/24
ip lan2 nat descriptor 1
pp enable 1

tunnel select 1
ipsec tunnel 1

（IPSEC設定省略）

tunnel enable 1

nat descriptor type 1 masquerade
nat descriptor address outer 1 192.168.2.1
nat descriptor address inner 1 192.168.2.101-192.168.2.120
nat descriptor masquerade static 1 1 192.168.2.100 esp
nat descriptor masquerade static 1 2 192.168.2.100 udp 500
nat descriptor masquerade static 1 3 192.168.2.100 tcp 1723
nat descriptor masquerade static 1 4 192.168.2.100 gre
ipsec auto refresh on
dhcp service server
dhcp scope 1 192.168.2.101-192.168.2.120/24
dns server dhcp lan2
dns private address spoof on