Код: Выделить всё
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Cisco_851
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
ip subnet-zero
no ip dhcp use vrf connected
!
ip cef
ip domain name PowerC
ip name-server 8.8.8.8
ip name-server 8.8.4.4
!
username cisco privilege 15 password 0 ххх
!
!
!
!
!
interface FastEthernet0
spanning-tree portfast
!
interface FastEthernet1
spanning-tree portfast
!
interface FastEthernet2
spanning-tree portfast
!
interface FastEthernet3
spanning-tree portfast
!
interface FastEthernet4
ip address 1.2.3.4 255.255.255.248
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Vlan1
ip address 192.168.0.1 255.255.255.0 secondary
ip address 192.168.3.1 255.255.255.0 secondary
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
ip classless
ip route 0.0.0.0 0.0.0.0 1.2.3.4
!
no ip http server
no ip http secure-server
ip nat pool NATPOOL 1.2.3.4 1.2.3.4 netmask 255.255.255.0
ip nat inside source list NATACL pool NATPOOL overload
ip nat inside source static tcp 192.168.2.20 81 1.2.3.4 80 extendable
ip nat inside source static tcp 192.168.2.20 81 1.2.3.4 81 extendable
ip nat inside source static tcp 192.168.2.3 81 1.2.3.4 82 extendable
ip nat inside source static tcp 192.168.2.3 80 1.2.3.4 83 extendable
ip nat inside source static tcp 192.168.2.3 22 1.2.3.4 2222 extendable
ip nat inside source static tcp 192.168.2.4 22 1.2.3.4 2223 extendable
ip nat inside source static tcp 192.168.2.32 3389 1.2.3.4 3389 extendable
ip dns server
!
ip access-list extended NATACL
permit ip 192.168.2.0 0.0.0.255 any
!
access-list 10 permit any
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
login local
transport input ssh
!
scheduler max-task-time 5000
ntp master 3
end
Например: ssh выдает connection timed out, хотя на сервере появляется строка
tcp4 0 0 192.168.2.3.22 9.8.7.6.63500 SYN_RCVD
При этом с самой циски telnet цепляется. Как-будто не хватает какого-то правила и пакеты из локалки не доходят на внешний комп. Все фаеры в сети выключены.
