@4you2

добрый вечер всем ! на маршрутизаторе есть 2 lan и один wan (192.168.1.х и 192.168.10.0 ) оба идут в интернет все работает , но адреса не видят хосты друг у друга допустим ping 192.168.1.35 от хоста 10.24 не алее ,ну вот пинг с любого хоста 168.1.х идет на интерфейс циски 10.1 и с точностью на оборот хосты 168.10.х пингует адрес 168.1.1 как настроить ? pleez )) у меня с объяснениями беда если что переспросите ))

0

@4you2

!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname UNI-CISCO-2650XM
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$y6yk$wFiFIvyfxjj4.ntu4mTNA0
!
username dddd password 0 qwerty
aaa new-model
!
!
aaa authentication login default local enable
aaa authentication login NO_AUTHENT local
aaa authorization exec default local if-authenticated
aaa authorization exec NO_AUTHOR none
aaa authorization commands 15 default local if-authenticated
aaa authorization commands 15 NO_AUTHOR none
aaa session-id common
ip subnet-zero
!
!
ip domain name mydomain.ru
ip name-server 454.5454.5454.5454
ip name-server 454.5454.5454.5454
!
ip audit notify log
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
no voice hpi capture buffer
no voice hpi capture destination
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.500
description LAN2
encapsulation dot1Q 500
ip address 192.168.10.1 255.255.255.0
ip nat inside
!
interface FastEthernet0/0.700
description WAN INTERFACE
encapsulation dot1Q 700
ip address 45254.5565.6565.65 255.255.255.248
ip nat outside
no cdp enable
!
interface FastEthernet0/0.800
description LAN INTERFACE
encapsulation dot1Q 800
ip address 192.168.1.1 255.255.255.0
ip nat inside

!
ip default-gateway 77.77.22.17
ip nat inside source list 10 interface FastEthernet0/0.700 overload
ip nat inside source static tcp 192.168.1.2 3389 545454 3389 extendable
no ip http server
no ip http secure-server
ip classless
ip route 0.0.0.0 0.0.0.0 77.25.63.17
ip route 192.168.1.0 255.255.255.0 FastEthernet0/0.800
ip route 192.168.1.0 255.255.255.0 192.168.10.0
ip route 192.168.10.0 255.255.255.0 192.168.1.0
ip route 192.168.10.0 255.255.255.0 FastEthernet0/0.500
!
!
access-list 10 permit 192.168.1.0 0.0.0.255
access-list 10 permit 192.168.10.0 0.0.0.255
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
login authentication NO_AUTHENT
transport input telnet ssh
!
!
!
end


WAN -адреса заменены естественно

Добавлено через 5 часов 32 минуты
вопрос снят всем спасибо !

0

@4you2

!
intace FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.500
description LAN2
encapsulation dot1Q 500
ip address 192.168.10.1 255.255.255.0
ip nat inside
!
interface FastEthernet0/0.700
description WAN INTERFACE
encapsulation dot1Q 700
ip address 45254.5565.6565.65 255.255.255.248
ip nat outside
no cdp enable
!
interface FastEthernet0/0.800
description LAN INTERFACE
encapsulation dot1Q 800
ip address 192.168.1.1 255.255.255.0
ip nat inside

!ip nat inside source list 10 interface FastEthernet0/0.700 overload
ip nat inside source static tcp 192.168.1.2 3389 545454 3389 extendable
no ip http server
no ip http secure-server
ip classless
ip route 0.0.0.0 0.0.0.0 77.25.63.17
ip route 192.168.1.0 255.255.255.0 FastEthernet0/0.800
ip route 192.168.10.0 255.255.255.0 FastEthernet0/0.500
!
!
access-list 10 permit 192.168.1.0 0.0.0.255
access-list 10 permit 192.168.10.0 0.0.0.255
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
login authentication NO_AUTHENT
transport input telnet ssh
!
!
!
end


WAN -адреса заменены естественно

вот так надо )

1