求大神指点。

﹨Cherish

小弟在用gns3模拟防火墙asa802的时候，基本配置完成，acl也做了。ping outside的时候提示封装失败，求各位大神帮忙啊啊啊啊。

int e0/0
ip add 200.11.1.1 255.255.255.0
no sh
nameif outside
security-level 0

int e0/1
ip add 192.11.10.1 255.255.255.0
no sh
nameif inside
security-level 100

int e0/2
ip add 192.11.20.1 255.255.255.0
no sh
nameif DMZ
security-level 50

access-list 100 extended permit ip any any
access-list 100 extended permit icmp any any
access-group 100 in interface outside
access-group 100 in interface inside
access-group 100 in interface DMZ

route inside 192.11.30.0 255.255.255.0 192.11.10.2
route inside 192.11.40.0 255.255.255.0 192.11.10.2
route outside 200.11.2.0 255.255.255.0 200.11.1.2

class-map inspection_default
policy-map global_policy
class inspection_default
inspect ftp
inspect icmp
inspect esmtp
inspect sqlnet
inspect skinny  
inspect sunrpc
inspect xdmcp