VPN部分网段不通

262855355

公司在上海、武汉、青岛三地用VPN互联。以前用的192.168.1.0/24 192.168.2.0/24 上海 192.168.3.0/24（公共上网网段不进入VPN）
192.168.100.0/24 192.168.101.0/24 武汉  192.168.104.0（公共上网网段不进入VPN）

192.168.110.0/24 青岛   192.168.111.0/24（公共上网网段不进入VPN）


现在武汉换了新大楼人员要增加 需要加103.0,105.0 两个网段我在防火墙上增加了如下的ACL列表
access-list 101 extended permit ip any any
access-list 101 extended permit icmp any any
access-list 110 extended permit ip 192.168.100.0 255.255.255.0 192.168.1.0 255.255.255.0
access-list 110 extended permit ip 192.168.101.0 255.255.255.0 192.168.1.0 255.255.255.0
access-list 110 extended permit ip 192.168.103.0 255.255.255.0 192.168.1.0 255.255.255.0
access-list 110 extended permit ip 192.168.101.0 255.255.255.0 host 192.168.254.254
access-list 110 extended permit ip 192.168.103.0 255.255.255.0 host 192.168.254.254
access-list 110 extended permit ip 192.168.100.0 255.255.255.0 192.168.2.0 255.255.255.0
access-list 110 extended permit ip 192.168.101.0 255.255.255.0 192.168.2.0 255.255.255.0
access-list 110 extended permit ip 192.168.103.0 255.255.255.0 192.168.2.0 255.255.255.0
access-list 110 extended permit ip 192.168.105.0 255.255.255.0 192.168.1.0 255.255.255.0
access-list 110 extended permit ip 192.168.105.0 255.255.255.0 host 192.168.254.254
access-list 110 extended permit ip 192.168.105.0 255.255.255.0 192.168.2.0 255.255.255.0
access-list nonat extended permit ip 192.168.100.0 255.255.255.0 192.168.1.0 255.255.255.0
access-list nonat extended permit ip 192.168.101.0 255.255.255.0 192.168.1.0 255.255.255.0
access-list nonat extended permit ip 192.168.103.0 255.255.255.0 192.168.1.0 255.255.255.0
access-list nonat extended permit ip 192.168.101.0 255.255.255.0 host 192.168.254.254
access-list nonat extended permit ip 192.168.103.0 255.255.255.0 host 192.168.254.254
access-list nonat extended permit ip 192.168.100.0 255.255.255.0 192.168.110.0 255.255.255.0
access-list nonat extended permit ip 192.168.101.0 255.255.255.0 192.168.110.0 255.255.255.0
access-list nonat extended permit ip 192.168.103.0 255.255.255.0 192.168.110.0 255.255.255.0
access-list nonat extended permit ip 192.168.100.0 255.255.255.0 192.168.2.0 255.255.255.0
access-list nonat extended permit ip 192.168.101.0 255.255.255.0 192.168.2.0 255.255.255.0
access-list nonat extended permit ip 192.168.103.0 255.255.255.0 192.168.2.0 255.255.255.0
access-list nonat extended permit ip 192.168.105.0 255.255.255.0 192.168.1.0 255.255.255.0
access-list nonat extended permit ip 192.168.105.0 255.255.255.0 host 192.168.254.254
access-list nonat extended permit ip 192.168.105.0 255.255.255.0 192.168.2.0 255.255.255.0
access-list nonat extended permit ip 192.168.105.0 255.255.255.0 192.168.110.0 255.255.255.0
access-list 104 extended permit ip 192.168.120.0 255.255.255.0 any
access-list 104 extended permit ip any 192.168.104.0 255.255.255.0
access-list 104 extended permit ip 192.168.104.0 255.255.255.0 any
access-list allow-ip-inside extended permit tcp any host 192.168.254.254 eq www
access-list allow-ip-inside extended permit tcp any host 192.168.254.254 eq 18080
access-list allow-ip-inside extended permit tcp any host 192.168.254.254 eq 23459
access-list allow-ip-inside extended permit tcp any host 192.168.254.254 eq 5222
access-list allow-ip-inside extended permit tcp any host 192.168.254.254 eq 8086
access-list allow-ip-inside extended permit tcp any host 192.168.254.254 eq 8087
access-list allow-ip-inside extended permit tcp any host 192.168.254.254 eq 8084
access-list allow-ip-inside extended permit tcp any host 192.168.254.254 eq 8085
access-list allow-ip-inside extended permit tcp any host 192.168.254.254 eq 5523
access-list allow-ip-inside extended permit tcp any host 192.168.254.254 eq 5524
access-list allow-ip-inside extended permit tcp any host 192.168.254.254 eq 5525
access-list allow-ip-inside extended permit tcp any host 192.168.254.254 eq 5526
access-list allow-ip-inside extended permit tcp any host 192.168.254.254 eq 18083
access-list allow-ip-inside extended permit tcp any host 192.168.254.254 eq https
access-list allow-ip-inside extended deny ip any host 192.168.254.254
access-list allow-ip-inside extended permit ip any any
access-list allow-ip-inside extended permit tcp any host 192.168.100.131 eq 3000
access-list allow-ip-inside extended permit tcp any host 192.168.100.131 eq pop3
access-list allow-ip-inside extended permit tcp any host 192.168.100.131 eq smtp
access-list 111 extended permit ip 192.168.100.0 255.255.255.0 192.168.110.0 255.255.255.0
access-list 111 extended permit ip 192.168.101.0 255.255.255.0 192.168.110.0 255.255.255.0
access-list 111 extended permit ip 192.168.103.0 255.255.255.0 192.168.110.0 255.255.255.0
access-list 111 extended permit ip 192.168.105.0 255.255.255.0 192.168.110.0 255.255.255.0

其中110绑定于到上海的VPN   111绑定于到青岛的VPN  nonat绑定于内部出口的

现在 武汉到上海所有的网段都已经互通了，但是武汉到青岛 100.0   101.0是可以互通，  103.0 105.0无法互通，青岛的防火墙是用的山石的，请他们工程师检测长ping 没有数据包被检测到。

maqizhao

把帖子弄热，等大神解答