Ip fisso e piu terminali
Inviato: ven 11 lug , 2008 5:24 pm
Ragazzi buongiorno,
sono in mezzo ad un problema da stamane.
Ho 8 ip statici, utilizzabili 6, devono uscire dall'ip 1 piu' terminali, ma non funziona.
Appena avvio 6 macchine, si prendono i 6 ip disponibili e la 7° macchina non prende ip.
Fowarding ? o non so ... ditemi voi
Di seguito l'attuale configurazione che ho cambiato forse un centinaio di volte
Building configuration...
Current configuration : 4254 bytes
!
version 12.4
service config
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
logging buffered 52000 debugging
enable secret 5 $1$PNYP$K8xnV5LuTq1QWsusjNBgR.
!
no aaa new-model
clock timezone Berlin 1
clock summer-time Berlin date Mar 30 2003 2:00 Oct 26 2003 3:00
!
!
!
!
ip cef
ip name-server 62.94.0.41
ip name-server 62.94.0.42
ip inspect name myfw cuseeme timeout 3600
ip inspect name myfw ftp timeout 3600
ip inspect name myfw rcmd timeout 3600
ip inspect name myfw realaudio timeout 3600
ip inspect name myfw smtp timeout 3600
ip inspect name myfw tftp timeout 30
ip inspect name myfw udp timeout 15
ip inspect name myfw tcp timeout 3600
ip inspect name myfw h323 timeout 3600
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
!
username Router password 0
username CRWS_Ritesh privilege 15 password 0 $1$W1fA$o1oSEpa1167442820
username CRWS_Santhosh privilege 15 password 0 $1$W1fA$o1oSEpa1930145547
username CRWS_Bijoy privilege 15 password 0 $1$W1fA$o1oSEpa1897575691
!
!
!
!
!
!
interface Ethernet0
ip address 192.168.1.1 255.255.248.0
ip access-group 122 out
ip nat inside
ip virtual-reassembly
no ip mroute-cache
hold-queue 100 out
!
interface Ethernet2
no ip address
shutdown
hold-queue 100 out
!
interface ATM0
no ip address
no ip mroute-cache
atm vc-per-vp 64
no atm ilmi-keepalive
dsl operating-mode auto
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet1
duplex auto
speed auto
!
interface FastEthernet2
duplex auto
speed auto
!
interface FastEthernet3
duplex auto
speed auto
!
interface FastEthernet4
duplex auto
speed auto
!
interface Dialer1
bandwidth 7200
ip address negotiated
ip access-group 111 in
ip flow ingress
ip nat outside
ip inspect myfw out
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname USERNAME
ppp chap password 0 PASSWORD
ppp pap sent-username USERNAME password 0 PASSWORD
ppp ipcp dns request
ppp ipcp wins request
hold-queue 224 in
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
!
ip http server
no ip http secure-server
!
ip nat pool 60 RANGE 8 IP netmask 255.255.255.248
ip nat inside source list 90 pool 60
ip nat inside source list 95 interface Dialer1 overload
!
access-list 90 remark SDM_ACL Category=2
access-list 90 permit 192.168.1.0 0.0.0.255
access-list 90 permit 192.168.2.0 0.0.0.255
access-list 90 permit 192.168.3.0 0.0.0.255
access-list 90 permit 192.168.4.0 0.0.0.255
access-list 90 permit 192.168.5.0 0.0.0.255
access-list 90 permit 192.168.6.0 0.0.0.255
access-list 90 permit 192.168.7.0 0.0.0.255
access-list 95 remark SDM_ACL Category=2
access-list 95 permit any
access-list 102 remark SDM_ACL Category=16
access-list 102 permit ip 192.168.0.0 0.0.0.255 any
access-list 111 permit tcp any any eq 4662
access-list 111 permit udp any any eq 4672
access-list 111 permit tcp any any eq telnet
access-list 111 permit icmp any any administratively-prohibited
access-list 111 permit icmp any any echo
access-list 111 permit icmp any any echo-reply
access-list 111 permit icmp any any packet-too-big
access-list 111 permit icmp any any time-exceeded
access-list 111 permit icmp any any traceroute
access-list 111 permit icmp any any unreachable
access-list 111 permit udp any eq bootps any eq bootpc
access-list 111 permit udp any eq bootps any eq bootps
access-list 111 permit udp any eq domain any
access-list 111 permit esp any any
access-list 111 permit udp any any eq isakmp
access-list 111 permit udp any any eq 10000
access-list 111 permit tcp any any eq 1723
access-list 111 permit tcp any any eq 139
access-list 111 permit udp any any eq netbios-ns
access-list 111 permit udp any any eq netbios-dgm
access-list 111 permit gre any any
access-list 111 deny ip any any
access-list 122 deny tcp any any eq telnet
access-list 122 permit ip any any
dialer-list 1 protocol ip permit
!
!
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
exec-timeout 120 0
login local
length 0
!
scheduler max-task-time 5000
end
sono in mezzo ad un problema da stamane.
Ho 8 ip statici, utilizzabili 6, devono uscire dall'ip 1 piu' terminali, ma non funziona.
Appena avvio 6 macchine, si prendono i 6 ip disponibili e la 7° macchina non prende ip.
Fowarding ? o non so ... ditemi voi
Di seguito l'attuale configurazione che ho cambiato forse un centinaio di volte
Building configuration...
Current configuration : 4254 bytes
!
version 12.4
service config
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
logging buffered 52000 debugging
enable secret 5 $1$PNYP$K8xnV5LuTq1QWsusjNBgR.
!
no aaa new-model
clock timezone Berlin 1
clock summer-time Berlin date Mar 30 2003 2:00 Oct 26 2003 3:00
!
!
!
!
ip cef
ip name-server 62.94.0.41
ip name-server 62.94.0.42
ip inspect name myfw cuseeme timeout 3600
ip inspect name myfw ftp timeout 3600
ip inspect name myfw rcmd timeout 3600
ip inspect name myfw realaudio timeout 3600
ip inspect name myfw smtp timeout 3600
ip inspect name myfw tftp timeout 30
ip inspect name myfw udp timeout 15
ip inspect name myfw tcp timeout 3600
ip inspect name myfw h323 timeout 3600
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
!
username Router password 0
username CRWS_Ritesh privilege 15 password 0 $1$W1fA$o1oSEpa1167442820
username CRWS_Santhosh privilege 15 password 0 $1$W1fA$o1oSEpa1930145547
username CRWS_Bijoy privilege 15 password 0 $1$W1fA$o1oSEpa1897575691
!
!
!
!
!
!
interface Ethernet0
ip address 192.168.1.1 255.255.248.0
ip access-group 122 out
ip nat inside
ip virtual-reassembly
no ip mroute-cache
hold-queue 100 out
!
interface Ethernet2
no ip address
shutdown
hold-queue 100 out
!
interface ATM0
no ip address
no ip mroute-cache
atm vc-per-vp 64
no atm ilmi-keepalive
dsl operating-mode auto
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet1
duplex auto
speed auto
!
interface FastEthernet2
duplex auto
speed auto
!
interface FastEthernet3
duplex auto
speed auto
!
interface FastEthernet4
duplex auto
speed auto
!
interface Dialer1
bandwidth 7200
ip address negotiated
ip access-group 111 in
ip flow ingress
ip nat outside
ip inspect myfw out
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname USERNAME
ppp chap password 0 PASSWORD
ppp pap sent-username USERNAME password 0 PASSWORD
ppp ipcp dns request
ppp ipcp wins request
hold-queue 224 in
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
!
ip http server
no ip http secure-server
!
ip nat pool 60 RANGE 8 IP netmask 255.255.255.248
ip nat inside source list 90 pool 60
ip nat inside source list 95 interface Dialer1 overload
!
access-list 90 remark SDM_ACL Category=2
access-list 90 permit 192.168.1.0 0.0.0.255
access-list 90 permit 192.168.2.0 0.0.0.255
access-list 90 permit 192.168.3.0 0.0.0.255
access-list 90 permit 192.168.4.0 0.0.0.255
access-list 90 permit 192.168.5.0 0.0.0.255
access-list 90 permit 192.168.6.0 0.0.0.255
access-list 90 permit 192.168.7.0 0.0.0.255
access-list 95 remark SDM_ACL Category=2
access-list 95 permit any
access-list 102 remark SDM_ACL Category=16
access-list 102 permit ip 192.168.0.0 0.0.0.255 any
access-list 111 permit tcp any any eq 4662
access-list 111 permit udp any any eq 4672
access-list 111 permit tcp any any eq telnet
access-list 111 permit icmp any any administratively-prohibited
access-list 111 permit icmp any any echo
access-list 111 permit icmp any any echo-reply
access-list 111 permit icmp any any packet-too-big
access-list 111 permit icmp any any time-exceeded
access-list 111 permit icmp any any traceroute
access-list 111 permit icmp any any unreachable
access-list 111 permit udp any eq bootps any eq bootpc
access-list 111 permit udp any eq bootps any eq bootps
access-list 111 permit udp any eq domain any
access-list 111 permit esp any any
access-list 111 permit udp any any eq isakmp
access-list 111 permit udp any any eq 10000
access-list 111 permit tcp any any eq 1723
access-list 111 permit tcp any any eq 139
access-list 111 permit udp any any eq netbios-ns
access-list 111 permit udp any any eq netbios-dgm
access-list 111 permit gre any any
access-list 111 deny ip any any
access-list 122 deny tcp any any eq telnet
access-list 122 permit ip any any
dialer-list 1 protocol ip permit
!
!
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
exec-timeout 120 0
login local
length 0
!
scheduler max-task-time 5000
end
