我先写一下配置 大侠们先受累看看!DMZ ping 不通外网,外网deb ip icmp 没流量显示
int e 0 nameif inside 192.168.1.2 /24
int e 1 nameif outside 172.16.1.2 /24
int e 2 nameif DMZ 202.1.1.2/24
对端全部是.1的地址。
nat (inside) 1 192.168.1.0 255.255.255.0
global(DMZ) 1 172.16.1.100 net 255.255.255.255
global(outside) 1 202.1.1.100 net 255.255.255.255
st (dmz,outside) 202.1.1.99 172.16.1.1
access-list 110 per ip any ho 202.1.1.100
acces-list 110 per ip any ho 202.1.1.99
access-gr 110 in in outside
access-list 120 per ip any ho 172.16.1.100
access-g