Re: [inet-admins] Server farm with FW1 i Cisco NAT

[Dmitri Kalintsev <dek@hades.uz>]

On Mon, Mar 20, 2000 at 08:28:33AM +0200, Egons Bush wrote:
> Hi!
> 
> Zaatachil ASCII art, v kotorom narisovano to, kak vygladit shema seti. Na
> Cisco hochetsa sdelatj NAT, shto-by dla Firewall-1 eto vygladelo kak odin IP
> adres. Delajem NAT, ping idet, traceroute idet, a FTP, Telnet, NetBIOS, itd
> ni v kakuju. V testovom rezhime na FW dla ServerFarm razresheno vse dla
> vseh. Bez NATa - vse prohodit. V chem grabli? Mozhet NAT kak-to po umnomu
> nuzhno delatj, osobenno, esli eto Ethernet-Ethernet NAT? 

1. Соответствующий кусок конфига сюда, плиз.

> Esli vkljuchit' "debug ip packet", to na Cisco E1 (na FW) vidni kakie-to
> encapsulation errori... Nikakoi encapuljacii tam netu. IOSi v predelah 11.3
> menjal - ne pomogaet. 12.x ne mogu postavit' ibo pamjati net.

2. А сюда - вывод соответствующего deb ip pack и deb ip nat, плиз.

> 
> Egons
> 

> 
>            External networks
>                    |
>                    |
>                    |
>     S              |
>     e f            |
>     r a---------Firewall--------DMZ
>     v r            |
>     e m            |
>     r              |  
>                    |e1
>                  Cisco
>                    |e0
>                    |  
>                    |
>                    |
>                   LAN

ЫН,
-- 
   (KD1350) CCNA                                     Dmitri E. Kalintsev
   CDPlayer@irc            Senior network engineer at NetActive Internet
   dek @ hades.uz                phone: +27 (0)11 719-0333 fax: 444-8900
   http://hades.uz                 UIN:7150410  cell  +27 (0)82-336-1033
=============================================================================
"inet-admins" Internet access mailing list. Maintained by East Connection ISP.
Mail "unsubscribe inet-admins" to Majordomo@info.east.ru if you want to quit.
Archive is accessible on http://info.east.ru/rus/inetadm.html