Настройка Cisco оборудования - [25] :: В помощь системному администратору

Result of the command: "ping 213.180.204.8"

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 213.180.204.8, timeout is 2 seconds:
No route to host 213.180.204.8

Success rate is 0 percent (0/1)

странно очень (

Добавлено:
Вот что выдает Latest ASDM Syslog Messages:

6    Oct 06 2009    19:49:54    110002             Failed to locate egress interface for UDP from office:s-dc01/64731 to 194.85.128.10/53
6    Oct 06 2009    19:50:07    110002             Failed to locate egress interface for TCP from office:s-dc01/21821 to 217.69.128.52/80
6    Oct 06 2009    19:50:22    110002             Failed to locate egress interface for TCP from office:s-dc01/21826 to 217.69.128.52/80
6    Oct 06 2009    19:50:33    110002             Failed to locate egress interface for UDP from office:s-dc01/58202 to 194.85.128.10/53
и т.д.

вот обновленный конфиг я навоял заново от заводских настроек, только мне кажется если я сохранял во флэш память у меня теперь заводские настройки другие(

Result of the command: "show running-config"

: Saved
:
ASA Version 7.2(4)
!
hostname cisco
domain-name мойдомен.ru
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
multicast-routing
names
name 192.168.1.2 s-dc01 description server
name 192.168.1.254 DSLModem description provider
!
interface Vlan1
nameif office
security-level 100
ip address 192.168.1.1 255.255.255.0
ospf cost 10
!
interface Vlan2
nameif Internet
security-level 0
ddns update hostname 192.168.1.2
dhcp client update dns
ip address XXX.XXX.188.246 255.255.255.252
ospf cost 10
!
interface Ethernet0/0
switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
ftp mode passive
clock timezone MSK/MSD 3
clock summer-time MSK/MDD recurring last Sun Mar 2:00 last Sun Oct 3:00
dns domain-lookup office
dns domain-lookup Internet
dns server-group DefaultDNS
domain-name мойдомен.ru
dns server-group s-dc01
name-server s-dc01
domain-name мойдомен.ru
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
object-group protocol TCPUDP
protocol-object udp
protocol-object tcp
access-list office_access_out extended permit ip any any
access-list Internet_access_in extended permit icmp any any
access-list Internet_access_in extended permit ip any any
access-list Internet_access_out extended permit ip any any
access-list office_access_in extended permit ip any any
pager lines 24
logging enable
logging asdm informational
mtu office 1500
mtu Internet 1500
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-524.bin
no asdm history enable
arp timeout 14400
global (Internet) 1 interface
nat (office) 1 0.0.0.0 0.0.0.0
access-group office_access_in in interface office
access-group office_access_out out interface office
access-group Internet_access_in in interface Internet
access-group Internet_access_out out interface Internet
route Internet XXX.XXX.188.246 255.255.255.254 XXX.XXX.188.245 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
http server enable
http s-dc01 255.255.255.254 office
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd address 192.168.1.10-192.168.1.100 office
dhcpd dns s-dc01 interface office
dhcpd domain мойдомен.ru interface office
dhcpd option 69 ip s-dc01 interface office
dhcpd option 70 ip s-dc01 interface office
dhcpd enable office
!

!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
!
service-policy global_policy global
prompt hostname context
Cryptochecksum:2ecdc0fb916e6fff082cbce3ca12cb2a
: end

И кстати, я нигде не нашел где указать ДНСы провайдера, т.е. роут стоит Мой внешний ИП - Шлюз провайдера и Маска провайдера, а днсы?

Добавлено:
6 Oct 06 2009 19:49:54 110002 Failed to locate egress interface for UDP from office:s-dc01/64731 to 194.85.128.10/53
Вот это кстати мой ДНС!!!

Добавлено:
Мне кажется проблема вот здесь
route Internet XXX.XXX.188.246 255.255.255.254 XXX.XXX.188.245 1
раз он так ругается что не может определить взаимодействие внутренней сети

Модерирует : lynx, Crash_Master, dg, emx, ShriEkeR
Версия для печати • Подписаться • Добавить в закладки
Страницы: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171