R1(23.1.1.1)---inside---(23.1.1.2)ASA(12.1.1.2)---outside---R2(12.1.1.1)
开了nat-control
配了PAT,
global(outside) 1 interface
nat(inside)1 0 0
access-list 1 per ip any any
access-group 1 in interface outside
icmp permit any inside
icmp permit any outside