Сетка на выходит из PIX'а, Коматозник, 28-Апр-04, 20:42 [смотреть все]Народ, подскажите плиз где ошибка, сетка не выходит в инет! PIX Version 6.3(1) interface ethernet0 auto interface ethernet1 auto interface ethernet2 auto interface ethernet3 auto shutdown interface ethernet4 auto shutdown interface ethernet5 auto shutdown nameif ethernet0 outside security0 nameif ethernet1 inside security100 nameif ethernet2 Teleset security4 nameif ethernet3 intf3 security6 nameif ethernet4 intf4 security8 nameif ethernet5 intf5 security10 enable password lfBPBMUCB4cQTK6h encrypted passwd lfBPBMUCB4cQTK6h encrypted hostname MASTER domain-name admdi.ru fixup protocol ftp 21 fixup protocol h323 h225 1720 fixup protocol h323 ras 1718-1719 fixup protocol http 80 fixup protocol ils 389 fixup protocol rsh 514 fixup protocol rtsp 554 fixup protocol sip 5060 fixup protocol sip udp 5060 fixup protocol skinny 2000 fixup protocol smtp 25 fixup protocol sqlnet 1521 names access-list access_acl_inside permit ip host 192.168.2.12 host 62.213.82.46 access-list access_acl_inside permit ip host 192.168.2.60 host 62.213.82.46 access-list access_acl_inside permit ip host 192.168.2.61 host 62.213.82.46 access-list access_acl_inside permit ip host 192.168.2.62 host 62.213.82.46 access-list access_acl_inside permit ip host 192.168.2.63 host 62.213.82.46 access-list access_acl_inside permit ip host 192.168.2.64 host 62.213.82.46 access-list access_acl_inside permit ip host 192.168.2.65 host 62.213.82.46 access-list access_acl_inside permit ip host 192.168.2.66 host 62.213.82.46 access-list access_acl_inside permit ip host 192.168.2.68 host 62.213.82.46 access-list access_acl_inside permit ip host 192.168.2.70 host 62.213.82.46 access-list access_acl_inside permit tcp host 192.168.2.3 any eq 3128 access-list access_acl_inside permit tcp host 192.168.2.3 host 62.213.82.35 access-list access_acl_inside permit tcp host 192.168.2.5 host 62.213.82.46 access-list access_acl_inside permit tcp host 192.168.2.9 host 62.213.82.35 access-list access_acl_inside permit tcp host 192.168.2.16 host 62.213.82.46 access-list access_acl_inside permit tcp host 192.168.2.9 host 62.213.82.46 access-list access_acl_inside permit tcp 192.168.2.128 255.255.255.128 host 62.213.82.46 access-list access_acl_inside permit ip host 192.168.2.69 host 62.213.82.46 access-list access_acl_outside permit tcp host 62.213.82.33 host 192.168.2.4 eq smtp access-list access_acl_outside permit tcp host 62.213.82.33 host 192.168.2.4 eq lotusnotes access-list access_acl_outside permit tcp host 62.213.82.36 host 192.168.2.11 eq www access-list access_acl_outside permit tcp host 62.213.82.39 host 192.168.2.63 eq 6000 access-list access_acl_outside permit tcp host 62.213.82.40 host 192.168.2.15 eq pptp access-list access_acl_outside permit tcp host 62.213.82.35 host 192.168.2.9 eq www access-list access_acl_outside permit tcp host 62.213.82.35 host 192.168.2.9 eq lotusnotes access-list access_acl_outside permit tcp host 62.213.82.39 host 192.168.2.70 eq pptp pager lines 24 mtu outside 1500 mtu inside 1500 mtu Teleset 1500 mtu intf3 1500 mtu intf4 1500 mtu intf5 1500 ip address outside 217.23.151.162 255.255.255.252 ip address inside 192.168.2.1 255.255.255.0 ip address Teleset 192.168.75.100 255.255.255.0 no ip address intf3 no ip address intf4 no ip address intf5 ip audit info action alarm ip audit attack action alarm no failover failover timeout 0:00:00 failover poll 15 no failover ip address outside no failover ip address inside no failover ip address Teleset no failover ip address intf3 no failover ip address intf4 no failover ip address intf5 pdm location 192.168.2.69 255.255.255.255 inside pdm history enable arp timeout 14400 global (outside) 1 62.213.82.33-62.213.82.47 nat (inside) 1 192.168.2.0 255.255.255.0 0 0 static (inside,outside) 62.213.82.33 192.168.2.4 netmask 255.255.255.255 0 0 static (inside,outside) 62.213.82.36 192.168.2.11 netmask 255.255.255.255 0 0 static (inside,outside) 62.213.82.39 192.168.2.63 netmask 255.255.255.255 0 0 static (inside,outside) 62.213.82.40 192.168.2.15 netmask 255.255.255.255 0 0 static (inside,outside) 62.213.82.35 192.168.2.9 netmask 255.255.255.255 0 0 access-group access_acl_outside in interface outside access-group access_acl_inside in interface inside route outside 0.0.0.0 0.0.0.0 217.23.151.161 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00 timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00 timeout uauth 0:05:00 absolute aaa-server TACACS+ protocol tacacs+ aaa-server RADIUS protocol radius aaa-server LOCAL protocol local http server enable http 192.168.2.69 255.255.255.255 inside no snmp-server location no snmp-server contact snmp-server community public no snmp-server enable traps floodguard enable telnet timeout 5 ssh 192.168.2.69 255.255.255.255 inside ssh 192.168.2.12 255.255.255.255 inside ssh timeout 60 console timeout 0 terminal width 80 Cryptochecksum:e37d390a139e7f066fa6754d9f636591 : end
|