ru.cisco

 
 - RU.CISCO ---------------------------------------------------------------------
 From : Yury Glukhovskoy                     2:5020/400     02 Apr 2003  15:03:56
 To : All
 Subject : PIX ?????
 -------------------------------------------------------------------------------- 
 

 Привет всем
 
 имеется PIX, пытаюсь настроить на нем NAT
 
 прописал все как надобно,
 
 PIX Version 6.2(2)
 nameif ethernet0 outside security0
 nameif ethernet1 inside security100
 enable password 8Ry2YjIyt7RRXU24 encrypted
 passwd 2KFQnbNIdI.2KYOU encrypted
 hostname PIX
 clock timezone msk 3
 fixup protocol ftp 21
 fixup protocol http 80
 fixup protocol h323 h225 1720
 fixup protocol h323 ras 1718-1719
 fixup protocol ils 389
 fixup protocol rsh 514
 fixup protocol rtsp 554
 fixup protocol smtp 25
 fixup protocol sqlnet 1521
 fixup protocol sip 5060
 fixup protocol skinny 2000
 names
 pager lines 24
 logging on
 logging timestamp
 logging buffered informational
 interface ethernet0 auto
 interface ethernet1 auto
 mtu outside 1500
 mtu inside 1500
 ip address outside 192.168.1.233 255.255.255.0
 ip address inside 192.168.101.1 255.255.255.0
 ip audit info action alarm
 ip audit attack action alarm
 pdm history enable
 arp timeout 14400
 global (outside) 1 192.168.1.234 netmask 255.255.255.255
 nat (inside) 1 192.168.101.0 255.255.255.0 0 0
 route outside 0.0.0.0 0.0.0.0 192.168.1.3 1
 timeout xlate 3:00:00
 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323
 0:05:00 sip 0:30:00 sip_media 0:02:00
 timeout uauth 0:05:00 absolute
 aaa-server TACACS+ protocol tacacs+
 aaa-server RADIUS protocol radius
 aaa-server LOCAL protocol local
 no snmp-server location
 no snmp-server contact
 snmp-server community public
 no snmp-server enable traps
 floodguard enable
 no sysopt route dnat
 telnet timeout 5
 ssh timeout 5
 terminal width 80
 
 в логах даже пишется вот такое
 Built dynamic TCP translation from inside:192.168.101.7/2553 to
 outside:192.168.1.234/1025
 Built outbound TCP connection 13 for outside:192.168.1.3/21 (192.168.1.3/21)
 to inside:192.168.101.7/2553 (192.168.1.234/1025)
 
 но соединение никак не работает
 
 в чем здесь проблема?
 
     Юрий
 --- ifmail v.2.15dev5
  * Origin: Demos online service (2:5020/400)
 
 

Вернуться к списку тем, сортированных по: возрастание даты  уменьшение даты  тема  автор 

Тема:    Автор:    Дата:    PIX ?????   Yury Glukhovskoy   02 Apr 2003 15:03:56   Re: PIX ?????   Leonid Ivonin   03 Apr 2003 09:11:05