oren_yastreb
01-06-2013, 21:25
Добрый день!
у меня стоит задача публикации FTP сервера который поднят внутри сети
Его адресс 10.47.13.44
Внешний адресс 92.255.248.107
Ввожу вот такие команды,
static (inside,outside) tcp outside ftp-data 10.47.13.44 ftp-data netmask 255.255.255.255
static (inside,outside) tcp 92.255.248.107 ftp 10.47.13.44 ftp netmask 255.255.255.255
получаю вот такую ошибку
ERROR: Static PAT using the interface requires the use of the 'interface' keyword instead of the interface IP address
Подскажите что не так?
PIX Version 7.0(8)
!
hostname pixfirewall
domain-name cisco.com
enable password JOAv/oQc3FWkWHEo encrypted
passwd JOAv/oQc3FWkWHEo encrypted
names
dns-guard
!
interface Ethernet0
speed 100
duplex full
no nameif
no security-level
no ip address
!
interface Ethernet0.1
vlan 2
nameif inside
security-level 100
ip address 172.16.1.1 255.255.255.252
!
interface Ethernet0.2
vlan 4
nameif DMZ
security-level 50
ip address 92.255.248.109 255.255.255.252
!
interface Ethernet0.3
vlan 5
nameif outside
security-level 0
ip address 92.255.248.107 255.255.255.252
!
interface Ethernet1
speed 100
duplex full
no nameif
no security-level
no ip address
!
interface Ethernet2
speed 100
duplex full
no nameif
no security-level
no ip address
!
у меня стоит задача публикации FTP сервера который поднят внутри сети
Его адресс 10.47.13.44
Внешний адресс 92.255.248.107
Ввожу вот такие команды,
static (inside,outside) tcp outside ftp-data 10.47.13.44 ftp-data netmask 255.255.255.255
static (inside,outside) tcp 92.255.248.107 ftp 10.47.13.44 ftp netmask 255.255.255.255
получаю вот такую ошибку
ERROR: Static PAT using the interface requires the use of the 'interface' keyword instead of the interface IP address
Подскажите что не так?
PIX Version 7.0(8)
!
hostname pixfirewall
domain-name cisco.com
enable password JOAv/oQc3FWkWHEo encrypted
passwd JOAv/oQc3FWkWHEo encrypted
names
dns-guard
!
interface Ethernet0
speed 100
duplex full
no nameif
no security-level
no ip address
!
interface Ethernet0.1
vlan 2
nameif inside
security-level 100
ip address 172.16.1.1 255.255.255.252
!
interface Ethernet0.2
vlan 4
nameif DMZ
security-level 50
ip address 92.255.248.109 255.255.255.252
!
interface Ethernet0.3
vlan 5
nameif outside
security-level 0
ip address 92.255.248.107 255.255.255.252
!
interface Ethernet1
speed 100
duplex full
no nameif
no security-level
no ip address
!
interface Ethernet2
speed 100
duplex full
no nameif
no security-level
no ip address
!