- Nat и Voip, ВОЛКА, 10:16 , 28-Мрт-05 (1)
написать статическую трансляцию...
- Nat и Voip, eternal, 22:37 , 28-Мрт-05 (2)
>написать статическую трансляцию... Спасибо я и сам до этого дошёл.
- Nat и Voip, oleg, 16:36 , 29-Мрт-05 (3)
Привет....помоги мне пожалуйста с PAT на циске... у меня соединение проходит, но я не слышу вызываемого адбонента, а он меня слышит...прочитал кучу рекомендаций, везде говорится что надо пробросить порты, а как это конкретно сделать я не могу догнать (наверное я тормоз) ....вот мой конфиг.... interface FastEthernet 0/0 no shutdown description connected to EthernetLAN ip address 80.237.5.129 255.255.255.248 ip address 172.16.1.192 255.255.255.0 secondary keepalive 10 ip access-group 100 in ip nat inside speed auto ! interface Ethernet 0/0 no shutdown description connected to Internet ip address 80.237.4.222 255.255.255.192 ip nat outside keepalive 10 half-duplex ! ! Access Control List 100 ! no access-list 100 access-list 100 permit udp host 10.10.10.10 any eq 500 access-list 100 permit udp host 10.10.10.10 any eq 4500 access-list 100 permit esp host 10.10.10.10 any access-list 100 permit ahp host 10.10.10.10 any access-list 100 permit gre host 10.10.10.10 any access-list 100 permit icmp host 10.10.10.10 any access-list 100 permit ip host 80.237.5.132 any access-list 100 permit ip any host 80.237.5.132 access-list 100 permit tcp any any eq domain access-list 100 permit udp any eq domain any access-list 100 permit tcp any any eq www access-list 100 permit tcp any any eq 443 access-list 100 permit tcp any any eq smtp access-list 100 permit udp any any eq 514 access-list 100 permit tcp any any established access-list 100 permit icmp any any access-list 100 permit udp any host 194.242.33.101 access-list 100 permit tcp any host 194.242.33.101 access-list 100 permit udp host 194.242.33.101 any access-list 100 permit tcp host 194.242.33.101 any access-list 100 deny ip any any ! ! Access Control List 101 ! no access-list 101 access-list 101 permit tcp 172.16.1.192 0.0.0.7 any eq 1723 access-list 101 permit udp 172.16.1.192 0.0.0.7 any eq 500 access-list 101 permit udp 172.16.1.192 0.0.0.7 any eq 4500 access-list 101 permit esp 172.16.1.192 0.0.0.7 any access-list 101 permit ahp 172.16.1.192 0.0.0.7 any access-list 101 permit gre 172.16.1.192 0.0.0.7 any access-list 101 permit icmp 172.16.1.192 0.0.0.7 any ! ! Access Control List entries for ABoard ! access-list 101 permit tcp host 172.16.4.2 host 10.10.10.10 eq 1723 access-list 101 permit udp host 172.16.4.2 host 10.10.10.10 eq 500 access-list 101 permit udp host 172.16.4.2 host 10.10.10.10 eq 4500 access-list 101 permit esp host 172.16.4.2 host 10.10.10.10 access-list 101 permit ahp host 172.16.4.2 host 10.10.10.10 access-list 101 permit gre host 172.16.4.2 host 10.10.10.10 access-list 101 permit icmp host 172.16.4.2 host 10.10.10.10 access-list 101 permit tcp host 172.16.1.4 host 10.10.10.10 eq 1723 access-list 101 permit udp host 172.16.1.4 host 10.10.10.10 eq 500 access-list 101 permit udp host 172.16.1.4 host 10.10.10.10 eq 4500 access-list 101 permit esp host 172.16.1.4 host 10.10.10.10 access-list 101 permit ahp host 172.16.1.4 host 10.10.10.10 access-list 101 permit gre host 172.16.1.4 host 10.10.10.10 access-list 101 permit icmp host 172.16.1.4 host 10.10.10.10 ! ! Access Control List entries for Mintrud ! access-list 101 permit tcp host 172.16.1.6 host 10.10.10.10 eq 1723 access-list 101 permit udp host 172.16.1.6 host 10.10.10.10 eq 500 access-list 101 permit udp host 172.16.1.6 host 10.10.10.10 eq 4500 access-list 101 permit esp host 172.16.1.6 host 10.10.10.10 access-list 101 permit ahp host 172.16.1.6 host 10.10.10.10 access-list 101 permit gre host 172.16.1.6 host 10.10.10.10 access-list 101 permit icmp host 172.16.1.6 host 10.10.10.10 ! ! Access Control List entries for VoIP ! !no access-list 102 access-list 101 permit tcp host 172.16.1.9 host 194.242.33.101 access-list 101 permit udp host 172.16.1.9 host 194.242.33.101 ! ! ARP Table ! arp 80.237.5.131 0007.e906.c574 ARPA arp 172.16.1.197 0007.e906.c574 ARPA arp 172.16.1.196 0007.e906.c574 ARPA arp 172.16.1.198 0007.e906.c574 ARPA arp 172.16.1.193 0007.e906.c574 ARPA arp 172.16.1.192 000b.be90.4c1b ARPA arp 172.16.1.195 0007.e906.c574 ARPA arp 172.16.1.194 0007.e906.c574 ARPA arp 172.16.1.1 0007.e906.c574 ARPA arp 172.16.1.2 0001.02d8.5093 ARPA arp 172.16.1.3 0040.f459.f18b ARPA arp 172.16.1.4 0040.9644.6dda ARPA arp 172.16.1.5 0040.9644.4ffc ARPA arp 172.16.1.6 0000.2122.5aba ARPA arp 172.16.4.2 000C.6E2F.9F00 ARPA ! ! Dinamic NAT ! ip nat inside source list 101 interface Ethernet0/0 overload no ip classless ! ! IP Static Routes ip route 80.237.0.0 255.255.0.0 80.237.4.254 ip route 172.16.2.0 255.255.255.0 172.16.1.2 ip route 172.16.4.0 255.255.255.0 172.16.1.4 ip http server
|