Sono un neofita e sto cercando di barcamenarmi nella configurazione dei router.
Mi trovo nella situazione di dover connettere un distaccamento di una filiale alla filiale tramite ponte radio, la filiale invece è collegata alla ditta mediante cdn.
Ho 2 router 1721 con 2 schede ethernet. La fastethernet è collegata allo switch e la scheda ethernet invece è collegata al ponte radio.
dal distaccamento con le configurazioni che includo riesco ad arrivare alla filiale e viceversa, ma dal distaccamento non riesco ad arrivare alla ditta.
la classe di ip del distaccamento è 10.186.34.0/255.255.255.0, la filiale ha 10.186.4.0/255.255.252.0 la ditta invece usa tutta la classe 10.0.0.0/255.0.0.0
dove sbaglio ?
router distaccamento
service config
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Router_distaccamento
!
boot-start-marker
boot-end-marker
!
enable password 7 02050D480809
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip audit po max-events 100
no ip domain lookup
no ftp-server write-enable
!
!
username cisco password 7 045802150C2E
!
!
!
crypto isakmp policy 10
encr aes 256
authentication pre-share
crypto isakmp key testkey1234 address 192.168.1.250
!
!
crypto ipsec transform-set aes-sha-transform esp-aes 256 esp-sha-hmac
!
crypto map aesmap 10 ipsec-isakmp
set peer 192.168.1.250
set transform-set aes-sha-transform
match address 101
!
!
!
interface BRI0
no ip address
shutdown
!
interface Ethernet0
ip address 192.168.1.254 255.255.255.248
half-duplex
no cdp enable
crypto map aesmap
no shutdown
!
interface FastEthernet0
ip address 10.186.34.240 255.255.255.0
speed auto
no cdp enable
no shutdown
!
ip classless
ip route 0.0.0.0 0.0.0.0 Ethernet0
ip http server
no ip http secure-server
!
access-list 101 permit ip 10.186.34.0 0.0.0.255 10.186.4.0 0.0.3.255
!
line con 0
line aux 0
line vty 0 4
no login
!
end
Router filiale
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Router_Rho
!
boot-start-marker
boot-end-marker
!
enable password 7 1511021F0725
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip audit po max-events 100
no ip domain lookup
no ftp-server write-enable
!
!
username cisco password 7 01100F175804
!
!
!
crypto isakmp policy 10
encr aes 256
authentication pre-share
crypto isakmp key testkey1234 address 192.168.1.254
!
!
crypto ipsec transform-set aes-sha-transform esp-aes 256 esp-sha-hmac
!
crypto map aesmap 10 ipsec-isakmp
set peer 192.168.1.254
set transform-set aes-sha-transform
match address 101
!
!
!
interface BRI0
no ip address
shutdown
!
interface Ethernet0
ip address 192.168.1.250 255.255.255.248
half-duplex
no cdp enable
crypto map aesmap
no shutdown
!
interface FastEthernet0
ip address 10.186.7.180 255.255.252.0
speed auto
no cdp enable
no shutdown
!
ip classless
ip route 10.186.34.0 255.255.255.0 Ethernet0
ip route 0.0.0.0 0.0.0.0 10.186.7.254
ip http server
no ip http secure-server
!
access-list 101 permit ip 10.186.4.0 0.0.3.255 10.186.34.0 0.0.0.255
!
line con 0
line aux 0
line vty 0 4
!
end
