[轉貼]設定Fortigate防火牆的PPPoE連線
<a href="http://trex0002006.pixnet.net/blog/post/31335820-%E8%A8%AD%E5%AE%9Afortigate%E9%98%B2%E7%81%AB%E7%89%86%E7%9A%84pppoe%E9%80%A3%E7%B7%9A">http://trex0002006.pixnet.net/blog/post/31335820-%E8%A8%AD%E5%AE%9Afortigate%E9%98%B2%E7%81%AB%E7%89%86%E7%9A%84pppoe%E9%80%A3%E7%B7%9A</a>
<div><h3 style="font-size: 12px; font-weight: normal; font-family: arial, verdana, Helvetica, sans-serif; line-height: 19px; text-align: -webkit-auto; -webkit-text-size-adjust: none; ">以下是 <a href="http://www.askasu.idv.tw/" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; text-decoration: none; color: rgb(35, 152, 161); ">蘇老碎碎唸</a> <a href="http://www.plurk.com/askasu/invite/4" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; text-decoration: none; color: rgb(35, 152, 161); ">AskaSu</a> 的文章</h3><p style="margin-bottom: 1em; font-family: arial, verdana, Helvetica, sans-serif; font-size: 12px; line-height: 19px; text-align: -webkit-auto; -webkit-text-size-adjust: none; "><a href="http://pic.pimg.tw/trex0002006/4bee34ac3c6fa.jpg?v=1273902252" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; text-decoration: none; color: rgb(35, 152, 161); "><img title="clip_image001" height="417" alt="clip_image001" src="http://pic.pimg.tw/trex0002006/4bee34ad162ac.jpg?v=1273902253" width="554" border="0" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; border-top-width: 0px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-style: initial; border-color: initial; border-right-style: initial; border-top-style: initial; display: inline; border-left-style: initial; border-bottom-style: initial; "></a><br style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">前陣子因為公司的對外線路到期了，經過跟總務部門討論後，依舊繼續跟中華電信續約，並且簽下了<a href="http://adsl.hinet.net/3ip/fleet_utm.html" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; text-decoration: none; color: rgb(35, 152, 161); ">資安艦隊方案</a>，因此...嘿嘿嘿，手邊就多了一台Fortigate 60B 可以惡搞啦... <a href="http://pic.pimg.tw/trex0002006/4bee34ad4b179.gif?v=1273902253" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; text-decoration: none; color: rgb(35, 152, 161); "><img title="clip_image003" height="21" alt="clip_image003" src="http://pic.pimg.tw/trex0002006/4bee34adbf5c9.gif?v=1273902254" width="21" border="0" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; border-top-width: 0px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-style: initial; border-color: initial; border-right-style: initial; border-top-style: initial; display: inline; border-left-style: initial; border-bottom-style: initial; "></a></p><p style="margin-bottom: 1em; font-family: arial, verdana, Helvetica, sans-serif; font-size: 12px; line-height: 19px; text-align: -webkit-auto; -webkit-text-size-adjust: none; ">不過，公司現有的網路環境就已經有防火牆，想要惡搞看效果還是不夠準，於是決定利用假日把FG60B 帶回家測。所以，第一件事情就是要先設定PPPoE網路連線。</p><p style="margin-bottom: 1em; font-family: arial, verdana, Helvetica, sans-serif; font-size: 12px; line-height: 19px; text-align: -webkit-auto; -webkit-text-size-adjust: none; "><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">1) </strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">進入</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">Fortigate </strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">管理介面，選</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">System -> Network </strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">。由於對中華電信小烏龜的網路線路，我是插在</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">wan1</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">介面上，故選擇</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">wan1 </strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">的設定。</strong><br style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; "><a href="http://pic.pimg.tw/trex0002006/4bee34ae7c6a5.jpg?v=1273902254" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; text-decoration: none; color: rgb(35, 152, 161); "><img title="clip_image004" height="310" alt="clip_image004" src="http://pic.pimg.tw/trex0002006/4bee34af8c5b3.jpg?v=1273902256" width="554" border="0" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; border-top-width: 0px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-style: initial; border-color: initial; border-right-style: initial; border-top-style: initial; display: inline; border-left-style: initial; border-bottom-style: initial; "></a></p><p style="margin-bottom: 1em; font-family: arial, verdana, Helvetica, sans-serif; font-size: 12px; line-height: 19px; text-align: -webkit-auto; -webkit-text-size-adjust: none; "><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">2) </strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">參考以下圖片，將「</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">Addressing Mode</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">」選擇為「</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">PPPoE</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">」，並填入撥接帳號（</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">Username</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">）及密碼（</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">Password</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">）。</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">注意！務必勾選「</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">Retrieve default gateway from server. </strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">」</strong>，否則可能會跟我一樣，花了很久時間還找不到內部電腦繞不出去的原因。<br style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; "><a href="http://pic.pimg.tw/trex0002006/4bee34b1704c4.jpg?v=1273902257" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; text-decoration: none; color: rgb(35, 152, 161); "><img title="clip_image005" height="554" alt="clip_image005" src="http://pic.pimg.tw/trex0002006/4bee34b268ffb.jpg?v=1273902258" width="472" border="0" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; border-top-width: 0px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-style: initial; border-color: initial; border-right-style: initial; border-top-style: initial; display: inline; border-left-style: initial; border-bottom-style: initial; "></a></p><p style="margin-bottom: 1em; font-family: arial, verdana, Helvetica, sans-serif; font-size: 12px; line-height: 19px; text-align: -webkit-auto; -webkit-text-size-adjust: none; ">檢查路由狀態。<br style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; "><a href="http://pic.pimg.tw/trex0002006/4bee34b337eb1.jpg?v=1273902259" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; text-decoration: none; color: rgb(35, 152, 161); "><img title="clip_image006" height="162" alt="clip_image006" src="http://pic.pimg.tw/trex0002006/4bee34b390906.jpg?v=1273902259" width="554" border="0" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; border-top-width: 0px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-style: initial; border-color: initial; border-right-style: initial; border-top-style: initial; display: inline; border-left-style: initial; border-bottom-style: initial; "></a></p><p style="margin-bottom: 1em; font-family: arial, verdana, Helvetica, sans-serif; font-size: 12px; line-height: 19px; text-align: -webkit-auto; -webkit-text-size-adjust: none; "><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">3) </strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">參考下圖，確認是否有設定</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">Internal </strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">轉</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; "> Wan1 </strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">的</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">Policy</strong><strong style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">。</strong>Fortigate 的Policy 設定跟路由概念很類似，所以就算路由設定是正確的，沒有在Policy 上再作設定，網路封包就一定會被擋掉。<br style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; "><a href="http://pic.pimg.tw/trex0002006/4bee34b491efc.jpg?v=1273902260" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; text-decoration: none; color: rgb(35, 152, 161); "><img title="clip_image007" height="240" alt="clip_image007" src="http://pic.pimg.tw/trex0002006/4bee34b50e976.jpg?v=1273902261" width="554" border="0" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; border-top-width: 0px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-style: initial; border-color: initial; border-right-style: initial; border-top-style: initial; display: inline; border-left-style: initial; border-bottom-style: initial; "></a></p><p style="margin-bottom: 1em; font-family: arial, verdana, Helvetica, sans-serif; font-size: 12px; line-height: 19px; text-align: -webkit-auto; -webkit-text-size-adjust: none; ">如果沒有，可以參考下圖增加該設定。人客啊！務必勾選「NAT」，否則一輩子也上不了Internet。<br style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; "><a href="http://pic.pimg.tw/trex0002006/4bee34b626095.jpg?v=1273902262" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; text-decoration: none; color: rgb(35, 152, 161); "><img title="clip_image009" height="525" alt="clip_image009" src="http://pic.pimg.tw/trex0002006/4bee34b70d792.jpg?v=1273902263" width="554" border="0" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; border-top-width: 0px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-style: initial; border-color: initial; border-right-style: initial; border-top-style: initial; display: inline; border-left-style: initial; border-bottom-style: initial; "></a></p><p style="margin-bottom: 1em; font-family: arial, verdana, Helvetica, sans-serif; font-size: 12px; line-height: 19px; text-align: -webkit-auto; -webkit-text-size-adjust: none; ">其實，Fortigate 防火牆預設值就會有一筆Internal 往Wan1 的Policy，但由於我惡搞過那台機器，把原本的Switch Mode 轉成Interface Mode，也就是讓每個Internal 的網路埠成為獨立的網路設定，所以必須重新設定Policy。<br style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; "><a href="http://pic.pimg.tw/trex0002006/4bee34b76ee39.jpg?v=1273902263" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; text-decoration: none; color: rgb(35, 152, 161); "><img title="clip_image010" height="125" alt="clip_image010" src="http://pic.pimg.tw/trex0002006/4bee34b7b7cc7.jpg?v=1273902263" width="554" border="0" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; border-top-width: 0px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-style: initial; border-color: initial; border-right-style: initial; border-top-style: initial; display: inline; border-left-style: initial; border-bottom-style: initial; "></a><br style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; "><a href="http://pic.pimg.tw/trex0002006/4bee34b8406ad.jpg?v=1273902265" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; text-decoration: none; color: rgb(35, 152, 161); "><img title="clip_image012" height="417" alt="clip_image012" src="http://pic.pimg.tw/trex0002006/4bee34ba2a5b9.jpg?v=1273902266" width="554" border="0" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; border-top-width: 0px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-style: initial; border-color: initial; border-right-style: initial; border-top-style: initial; display: inline; border-left-style: initial; border-bottom-style: initial; "></a></p><p style="margin-bottom: 1em; font-family: arial, verdana, Helvetica, sans-serif; font-size: 12px; line-height: 19px; text-align: -webkit-auto; -webkit-text-size-adjust: none; ">以上三個步驟就完成了PPPoE 的連線上網。</p><p style="margin-bottom: 1em; font-family: arial, verdana, Helvetica, sans-serif; font-size: 12px; line-height: 19px; text-align: -webkit-auto; -webkit-text-size-adjust: none; ">只是，明明就很直覺的設定，我那天卻花了很久時間還是連不上網，原因在於：<br style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">1. PPPoE 的帳號密碼欄位不能用複製貼上填入資料，請乖乖一個字一個字鍵入，否則Fortigate 根本就不吃進去。這夠詭異吧... <a href="http://pic.pimg.tw/trex0002006/4bee34ba6820d.gif?v=1273902266" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; text-decoration: none; color: rgb(35, 152, 161); "><img title="clip_image014" height="19" alt="clip_image014" src="http://pic.pimg.tw/trex0002006/4bee34bac926a.gif?v=1273902267" width="19" border="0" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; border-top-width: 0px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-style: initial; border-color: initial; border-right-style: initial; border-top-style: initial; display: inline; border-left-style: initial; border-bottom-style: initial; "></a><br style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">2. 第二步驟中有提到「Retrieve default gateway from server」的設定，就是因為沒有勾選到，所以內部網路的電腦怎樣都上不了外網，就算在Fortigate 上手動增加路由也沒用。</p><p style="margin-bottom: 1em; font-family: arial, verdana, Helvetica, sans-serif; font-size: 12px; line-height: 19px; text-align: -webkit-auto; -webkit-text-size-adjust: none; ">果然，台上十分鐘台下十年功啊！</p><p style="margin-bottom: 1em; font-family: arial, verdana, Helvetica, sans-serif; font-size: 12px; line-height: 19px; text-align: -webkit-auto; -webkit-text-size-adjust: none; "><font color="#008000" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">引用自：</font><a href="http://www.askasu.idv.tw/index.php/2009/04/07/407/" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; text-decoration: none; color: rgb(35, 152, 161); "><font color="#008000" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">http://www.askasu.idv.tw/index.php/2009/04/07/407/</font></a></p></div>