Исходное сообщение
"ARP c нового субинтерфейса???" Отправлено Krivoy, 25-Июл-06 13:25
>конфиг покажите ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! boot-start-marker boot-end-marker ! logging buffered 10000 debugging enable secret 5 ! no aaa new-model ! resource policy ! ! ! ip cef ! ! no ip domain lookup ip ssh time-out 60 ip ssh authentication-retries 2 ip inspect name COM tcp ip inspect name COM udp vpdn enable ! vpdn-group VPDN1 ! Default PPTP VPDN group accept-dialin   protocol pptp   virtual-template 1 ! voice-card 0 no dspfarm ! interface Tunnel5 ip address 172.16.100.1 255.255.255.0 tunnel source 172.16.1.1 tunnel destination 172.16.1.5 ! interface Loopback1 ip address 172.16.101.1 255.255.255.255 ! interface GigabitEthernet0/0 description OUTSIDE ip address xx.xx.xx.177 255.255.255.252 secondary ip address 172.16.1.1 255.255.255.252 ip access-group Internet in ip mtu 1476 ip virtual-reassembly duplex auto speed auto ! interface GigabitEthernet0/1 no ip address duplex auto speed auto ! interface GigabitEthernet0/1.102 description dmz2 encapsulation dot1Q 102 ip address xx.xx.xx.102 255.255.255.252 ip inspect COM in ip policy route-map net-102 no snmp trap link-status ! interface GigabitEthernet0/1.192 description INSIDE encapsulation dot1Q 192 native ip address 192.168.1.254 255.255.255.0 ip access-group Inside in ip inspect COM in ip virtual-reassembly no snmp trap link-status ! interface GigabitEthernet0/1.217 description DMZ encapsulation dot1Q 217 ip address xx.xx.xx.xx 255.255.255.252 ip inspect COM in no snmp trap link-status ! interface Virtual-Template1 ip unnumbered GigabitEthernet0/1.192 ip inspect COM in ip virtual-reassembly peer default ip address pool VPDN_POOL ppp encrypt mppe auto ppp authentication ms-chap-v2 ! router eigrp 10 passive-interface default no passive-interface Tunnel5 network 172.16.1.0 0.0.0.3 network 172.16.100.0 0.0.0.255 network 172.16.101.0 0.0.0.255 network 192.168.1.0 network xx.xx.xx.172 0.0.0.3 no auto-summary ! ip local pool VPDN_POOL 192.168.1.241 192.168.1.249 ip route 0.0.0.0 0.0.0.0 xx.xx.xx.178 ip route 172.16.1.5 255.255.255.255 172.16.1.2 ! no ip http server no ip http secure-server ! ip access-list extended DMZ permit ip host xx.xx.xx.173 any permit ip host xx.xx.xx.101 any deny   ip any any log ip access-list extended Inside permit ip 192.168.1.0 0.0.0.255 host xx.xx.xx.173 permit ip 192.168.1.0 0.0.0.255 host xx.xx.xx.101 permit ip 192.168.1.0 0.0.0.255 192.168.0.0 0.0.255.255 deny   ip any any log ! access-list 111 permit ip host xx.xx.xx.101 any ! route-map net-102 permit 111 match ip address 111 set ip next-hop xx.xx.xx.178 ! scheduler allocate 20000 1000 ! end Это с вариантом route-map