ASA5505

962456310@qq.co

配置：+ciscoasa(config)# sh run
: Saved
:
ASA Version 7.2(4)
!
hostname ciscoasa
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Vlan1
nameif inside
security-level 100
ip address 192.168.10.1 255.255.255.0
!
interface Vlan2
nameif outside
security-level 0
ip address 192.168.20.1 255.255.255.0
!
interface Ethernet0/0
shutdown
!
interface Ethernet0/1
!
interface Ethernet0/2
switchport access vlan 2
!
interface Ethernet0/3
shutdown
!
interface Ethernet0/4
shutdown
!
interface Ethernet0/5
shutdown
!
interface Ethernet0/6
shutdown
!
interface Ethernet0/7
shutdown
!
ftp mode passive
access-list 100 extended permit icmp any any
pager lines 24
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
nat-control
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
route outside 0.0.0.0 0.0.0.0 192.168.20.100 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
no service password-recovery
telnet timeout 5
ssh timeout 5
console timeout 0
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
  message-length maximum 512
policy-map global_policy
class inspection_default
  inspect dns preset_dns_map
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect netbios
  inspect rsh
  inspect rtsp
  inspect skinny
  inspect esmtp
  inspect sqlnet
  inspect sunrpc
  inspect tftp
  inspect sip
  inspect xdmcp
!
service-policy global_policy global
prompt hostname context
Cryptochecksum:d41d8cd98f00b204e9800998ecf8427e
: end

问题描述：
1、为什么R1可以ping通192.168.10.1而ping不通192.168.20.1
请指导一下

qq360870025

ASA的特性，内部的地址，访问不了ASA outside的接口地址

962456310@qq.co

qq360870025 发表于 2012-11-26 23:08
ASA的特性，内部的地址，访问不了ASA outside的接口地址

那应该怎么配置啊？求指导

qq360870025

962456310@qq.co 发表于 2012-11-26 23:27
那应该怎么配置啊？求指导

这个没解决办法哦， ASA就是这样

962456310@qq.co

qq360870025 发表于 2012-11-27 00:01
这个没解决办法哦， ASA就是这样

那问题是也ping不了PC2呢？

qq360870025

962456310@qq.co 发表于 2012-11-27 00:53
那问题是也ping不了PC2呢？

看你配置，写了ACL但是没有调用在outside接口

shaozhe

yishuizhao

access-list 100根本没调用，默认是ping不通的。有往outside的默认路由，却没有回指路由。

流星舞动

booso

呵呵，这个问题嘛

jerreshi109

vlan1 的口子没配上去吧。