ho un problema che davvero non riesco a risolvere: sono 3 giorni che ci sbatto la testa.
Riepilogo della configurazione:
IP/MASK LAN: 195.223.193.80 - 255.255.255.240
IP/MASK PTP: 94.85.59.80 - 255.255.255.252
In pratica non riesco a fare NAT ( mentre dal router riesco a pingare hosts remoti )..non so più che pesci prendere.
La mia conf:
Dove sbaglio ?
Grazie a chi vorrà darmi una mano!!
Ciao!
- G.
Codice: Seleziona tutto
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname cisco
!
boot-start-marker
boot-end-marker
!
logging buffered 200000
enable secret 5 $1$8amB$43zMk.Wns5ClbK7YO41FC/
enable password *****
!
no aaa new-model
!
no ipv6 cef
ip source-route
ip cef
!
!
!
!
ip name-server 194.243.154.92
ip name-server 195.31.190.31
multilink bundle-name authenticated
!
!
crypto pki trustpoint TP-self-signed-915917310
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-915917310
revocation-check none
rsakeypair TP-self-signed-915917310
!
!
crypto pki certificate chain TP-self-signed-915917310
certificate self-signed 01
3082023B 308201A4 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 39313539 31373331 30301E17 0D313130 38303231 34353234
315A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3931 35393137
33313030 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
C8495C80 9DB3C3FE D774E3D1 AB267B8A 814D159A F0E48E66 2C63A1C6 2D5BA5FD
323F25A8 8A68380A F3204CC1 87332EA1 2E9F6089 BBD96923 6B0B41D6 52E9DABB
F74ED58F DA158436 A1F29806 6F97BA5E 1E1F2210 FB73961C 9590FC16 8DDE0332
E3E888FA ECA0BD79 93D547E6 8CEA5F53 FAA9502B D0829B29 E32EE77C 8CA437A1
02030100 01A36530 63300F06 03551D13 0101FF04 05300301 01FF3010 0603551D
11040930 07820563 6973636F 301F0603 551D2304 18301680 143612D9 A5AFD0E7
DCD1DB2B EF0F51AF E8F9FD0F D1301D06 03551D0E 04160414 3612D9A5 AFD0E7DC
D1DB2BEF 0F51AFE8 F9FD0FD1 300D0609 2A864886 F70D0101 04050003 818100B7
3E13CDE8 31A1DA97 FACF3446 CD2E0832 FB842754 FAB03463 44F7FE72 401DDCAC
B4472DE2 11D6686A 2283F757 793F8CDF 90911FDC 7EA8E740 1E7A8999 CCBC8871
842B48B9 C7482F2A 5E58E971 9935BB1D 3102429E F2278D3A 40D49ED2 5D0E4DBE
E53E181E 5B6DACE1 C3403758 AF5789A0 53ABCB2C BD39754C DE701182 54CAA2
quit
license udi pid CISCO1921/K9 sn FCZ152790HK
!
!
username gian privilege 15 secret 5 $1$V6hM$MJf9EH5XJ6BE2YyW/.FE2.
!
!
no ip ftp passive
!
!
!
!
interface GigabitEthernet0/0
description $ETH-LAN$
ip address 195.223.193.81 255.255.255.252 secondary
ip address 10.10.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
no mop enabled
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1/0
description HDSL TELECOM
mtu 1600
bandwidth 2048
no ip address
encapsulation frame-relay
no ip route-cache cef
no ip route-cache
no fair-queue
frame-relay traffic-shaping
!
interface Serial0/1/0.1 point-to-point
ip address 94.85.59.82 255.255.255.252
ip nat outside
ip virtual-reassembly
no ip route-cache
no cdp enable
no arp frame-relay
frame-relay interface-dlci 456 IETF
!
interface Serial0/1/1
no ip address
shutdown
clock rate 125000
!
ip forward-protocol nd
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip nat inside source list 101 interface Serial0/1/0.1 overload
ip route 0.0.0.0 0.0.0.0 Serial0/1/0.1
!
logging trap debugging
logging 10.10.10.100
access-list 1 permit 10.10.10.0 0.0.0.255
!
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
exec-timeout 0 0
privilege level 15
password *****
login local
transport input telnet ssh
transport output none
!
scheduler allocate 20000 1000
end