Исходное сообщение
"pix 515E - router 1700 не проходит ping " Отправлено andr2211, 25-Авг-06 12:17
добрый день! имеется: локальная сеть 192.168.0.0-192.168.0.240-router1760-172.16.0.11-172.16.0.10-pix-10.0.0.11-10.0.0.0-локальная сеть Проблема не проходит пинг из сети 192.168.0.0 в 10.0.0.0. HELP!!!!!!!!!! Конфиг router: Building configuration... Current configuration : 2005 bytes ! version 12.3 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname router ! boot-start-marker boot-end-marker ! logging buffered 51200 warnings ! username cisco privilege 15 password 0 cisco username router no aaa new-model ip subnet-zero ! ! ! ! ip cef ip audit notify log ip audit po max-events 100 ip ssh break-string no ftp-server write-enable no scripting tcl init no scripting tcl encdir ! no crypto isakmp enable ! ! interface FastEthernet0/0 ip address 192.168.0.240 255.255.255.0 speed auto ! interface Ethernet1/0 ip address 172.16.0.11 255.255.255.0 half-duplex ! ip classless ip route 10.0.0.0 255.255.255.0 172.16.0.10 ip http server no ip http secure-server ! ! control-plane ! ! line con 0 line aux 0 line vty 0 4 privilege level 15 password cisco login transport input telnet ssh ! ! end Конфиг Pix: PIX Version 6.3(5) interface ethernet0 auto interface ethernet1 auto interface ethernet2 auto shutdown nameif ethernet0 outside security0 nameif ethernet1 admin security99 nameif ethernet2 intf2 security4 enable password 8Ry2YjIyt7RRXU24 encrypted passwd 2KFQnbNIdI.2KYOU encrypted hostname pixfirewall fixup protocol dns maximum-length 512 fixup protocol ftp 21 fixup protocol h323 h225 1720 fixup protocol h323 ras 1718-1719 fixup protocol http 80 fixup protocol rsh 514 fixup protocol rtsp 554 fixup protocol sip 5060 fixup protocol sip udp 5060 fixup protocol skinny 2000 fixup protocol smtp 25 fixup protocol sqlnet 1521 fixup protocol tftp 69 names access-list 101 permit ip 10.0.0.0 255.255.255.0 192.168.0.0 255.255.255.0 access-list admin_acl permit icmp any any access-list outside_acl permit icmp any any pager lines 24 icmp permit any outside icmp permit any admin mtu outside 1500 mtu admin 1500 mtu intf2 1500 ip address outside 172.16.0.10 255.255.255.0 ip address admin 10.0.0.11 255.255.255.0 no ip address intf2 ip audit info action alarm ip audit attack action alarm pdm logging informational 100 pdm history enable arp timeout 14400 access-group outside_acl in interface outside access-group admin_acl in interface admin conduit permit icmp any any route outside 0.0.0.0 0.0.0.0 172.168.0.11 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00 timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00 timeout sip-disconnect 0:02:00 sip-invite 0:03:00 timeout uauth 0:05:00 absolute aaa-server TACACS+ protocol tacacs+ aaa-server TACACS+ max-failed-attempts 3 aaa-server TACACS+ deadtime 10 aaa-server RADIUS protocol radius aaa-server RADIUS max-failed-attempts 3 aaa-server RADIUS deadtime 10 aaa-server LOCAL protocol local http server enable http 192.168.1.0 255.255.255.0 admin no snmp-server location no snmp-server contact snmp-server community public no snmp-server enable traps floodguard enable telnet 192.168.0.0 255.255.255.0 outside telnet 192.168.0.0 255.255.255.0 admin telnet 10.0.0.0 255.255.255.0 admin telnet timeout 5 ssh timeout 5 console timeout 0 terminal width 80 Cryptochecksum:2ac305f901de45398e86de68f15893b9 : end