| WAN | DHCP, static, PPPoE, IPv6 IPoE (RA, DHCPv6-PD), MAP-E, DS-Lite, VLAN |
|---|
| LAN | Multiple LANs, VLANs, DHCP server (static leases, lease list), IPv6 (prefix delegation + RA) |
|---|
| DNS | Caching and forwarding, names of DHCP clients, conditional forwarding, static records, DNSSEC validation |
|---|
| Firewall | Zone based (input and forwarding per zone), zone-to-zone policies, extra rules, masquerade (port-restricted on MAP-E), port forwarding |
|---|
| Remote access VPN | WireGuard, OpenVPN (UDP/TCP), IKEv2 (EAP-MSCHAPv2), L2TP/IPsec. VPN users and groups decide methods, allowed destinations and expiry. Configuration files, QR codes and configuration profiles |
|---|
| Site-to-site VPN | IPsec (IKEv2/IKEv1, pre-shared key or certificate, NAT traversal, DPD) and WireGuard. Tunnels belong to zones, so the firewall decides what they reach |
|---|
| Management | Web interface (Japanese/English), router CLI (SSH and console), candidate → diff → apply → confirm, automatic revert, configuration history |
|---|
| Admin users | Roles (none / view / edit per area), two-factor authentication, allowed login sources, password requirements, SSH public keys |
|---|
| Monitoring | Zabbix agent (PSK), SNMP (v3/v2c), Prometheus node_exporter, answering only the allowed managers |
|---|
| Maintenance | Dashboard, devices, traffic, connections, logs, diagnostics (ping, traceroute, packet capture), backup and restore, updates from a signed repository |
|---|