ho di recente configurato un 1841 usando SDM 2.5
Sto usando le due FE del router,una per la parte LAN ed una per la parte WAN.La seconda ha un ip statico e come gateway mi è stato dato un secondo ip.Ho creato una route che indirizza tutto il traffico verso l'ip del gateway.
Il mio problema è che se provo a pingare al gateway ottengo risposta,mentre se provo a pingare l'ip della WAN ottengo quanto segue
rete di destinazione non raggiungibile
Qui trovate le parti di conf relative
interface FastEthernet0/1
description $FW_OUTSIDE$$ETH-WAN$
ip address xxx.xxx.xxx.254 255.255.255.252
ip access-group 103 in
ip inspect SDM_LOW out
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
crypto map SDM_CMAP_1
access-list 103 remark auto generated by SDM firewall configuration
access-list 103 remark SDM_ACL Category=1
access-list 103 permit udp host 208.67.220.220 eq domain any
access-list 103 permit udp host 208.67.222.222 eq domain any
access-list 103 permit ahp host yyy.yyy.yyy.yyy host xxx.xxx.xxx.254
access-list 103 permit esp host yyy.yyy.yyy.yyy host xxx.xxx.xxx.254
access-list 103 permit udp host yyy.yyy.yyy.yyy host xxx.xxx.xxx.254 eq isakmp
access-list 103 permit udp host yyy.yyy.yyy.yyy host xxx.xxx.xxx.254 eq non500-isakmp
access-list 103 permit ahp host yyy.yyy.yyy.yyy any
access-list 103 permit esp host yyy.yyy.yyy.yyy any
access-list 103 permit udp host yyy.yyy.yyy.yyy any eq isakmp
access-list 103 permit udp host yyy.yyy.yyy.yyy any eq non500-isakmp
access-list 103 remark IPSec Rule
access-list 103 permit ip 10.0.0.0 0.255.255.255 10.5.3.0 0.0.0.255
access-list 103 deny ip 10.5.3.0 0.0.0.255 any
access-list 103 permit udp any eq bootps any eq bootpc
access-list 103 permit icmp any any echo-reply
access-list 103 permit icmp any any time-exceeded
access-list 103 permit icmp any any unreachable
access-list 103 deny ip 10.0.0.0 0.255.255.255 any
access-list 103 deny ip 172.16.0.0 0.15.255.255 any
access-list 103 deny ip 192.168.0.0 0.0.255.255 any
access-list 103 deny ip 127.0.0.0 0.255.255.255 any
access-list 103 deny ip host 255.255.255.255 any
access-list 103 deny ip any any log
ip route 0.0.0.0 0.0.0.0 xxx.xxx.xxx.253 permanent
Grazie in anticipo a tutti!
