Quindi la stringa dovrebbe essere così?
Codice: Seleziona tutto
permit tcp host xx.xx.xx.xx eq 22 any
permit udp host xx.xx.xx.xx eq 22 any
Grazie per le dritte....
Moderatore: Federico.Lagni
Codice: Seleziona tutto
permit tcp host xx.xx.xx.xx eq 22 any
permit udp host xx.xx.xx.xx eq 22 any
Pregosardinside ha scritto:Perfetto... E ti ringrazio davvero per l'aiuto che mi hai dato...
Codice: Seleziona tutto
Building configuration...
Current configuration : 8411 bytes
!
! Last configuration change at 09:25:38 UTC Wed Jan 20 2016 by comecar
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname XXXXX
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 XXXXXX
!
no aaa new-model
!
no ip cef optimize neighbor resolution
ip cef
!
!
!
!
!
!
no ip domain lookup
ip domain name XXXXX.local
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
license udi pid CISCO1921/K9 sn FGL1819205A
!
!
username XXXX password 7 XXXXXXX
!
redundancy
!
!
!
!
!
controller VDSL 0/0/0
!
controller VDSL 0/1/0
!
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh version 2
!
track 1 ip sla 1
delay down 10 up 10
!
track 2 ip sla 2
delay down 10 up 10
!
track 3 ip sla 3
delay down 10 up 10
!
!
!
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 10.0.10.2 255.255.255.252
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 10.0.0.1 255.255.255.252
ip nat inside
ip virtual-reassembly in
ip policy route-map WWWSERVICE
duplex auto
speed auto
!
interface ATM0/0/0
no ip address
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface Ethernet0/0/0
no ip address
shutdown
!
interface ATM0/1/0
no ip address
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 2
!
!
interface Ethernet0/1/0
no ip address
shutdown
!
interface Dialer0
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname xxxxxx
ppp chap password xxxxxx
no cdp enable
!
interface Dialer1
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation ppp
ip tcp header-compression
dialer pool 2
dialer-group 2
ppp authentication chap pap callin
ppp chap hostname xxxxxxx
ppp chap password xxxxxxx
no cdp enable
!
ip local policy route-map IPSLA
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat inside source route-map COMECAR_1 interface GigabitEthernet0/0 overload
ip nat inside source route-map DIAL0 interface Dialer0 overload
ip nat inside source route-map DIAL1 interface Dialer1 overload
ip nat inside source static tcp 10.0.5.2 25 aaaaaaaa 25 extendable
ip nat inside source static udp 10.0.5.2 25 aaaaaaaa 25 extendable
ip nat inside source static tcp 10.0.5.2 80 aaaaaaaa 80 extendable
ip nat inside source static udp 10.0.5.2 80 aaaaaaaa 80 extendable
ip nat inside source static tcp 10.0.5.2 443 aaaaaaaa 443 extendable
ip nat inside source static udp 10.0.5.2 443 aaaaaaaa 443 extendable
ip nat inside source static tcp 10.0.5.2 5004 aaaaaaaa 5004 extendable
ip nat inside source static udp 10.0.5.2 5004 aaaaaaaa 5004 extendable
ip nat inside source static tcp 10.0.5.2 8080 aaaaaaaa 8080 extendable
ip nat inside source static udp 10.0.5.2 8080 aaaaaaaa 8080 extendable
ip nat inside source static tcp 10.0.5.3 8016 bbbbbbbb 8016 extendable
ip nat inside source static udp 10.0.5.3 8016 bbbbbbbb 8016 extendable
ip nat inside source static tcp 10.0.5.3 8200 bbbbbbbb 8200 extendable
ip nat inside source static udp 10.0.5.3 8200 bbbbbbbb 8200 extendable
ip nat inside source static tcp 10.0.5.3 10019 bbbbbbbb 10019 extendable
ip nat inside source static udp 10.0.5.3 10019 bbbbbbbb 10019 extendable
ip nat inside source static tcp 10.0.5.3 10088 bbbbbbbb 10088 extendable
ip nat inside source static udp 10.0.5.3 10088 bbbbbbbb 10088 extendable
ip nat inside source static tcp 10.0.5.3 12088 bbbbbbbb 12088 extendable
ip nat inside source static udp 10.0.5.3 12088 bbbbbbbb 12088 extendable
ip nat inside source static tcp 10.0.5.4 80 cccccccc 80 extendable
ip nat inside source static udp 10.0.5.4 80 cccccccc 80 extendable
ip nat inside source static tcp 10.0.5.5 23 dddddddd 23 extendable
ip nat inside source static udp 10.0.5.5 23 dddddddd 23 extendable
ip nat inside source static tcp 10.0.5.5 80 dddddddd 80 extendable
ip nat inside source static udp 10.0.5.5 80 dddddddd 80 extendable
ip nat inside source static tcp 10.0.5.5 3300 dddddddd 3300 extendable
ip nat inside source static udp 10.0.5.5 3300 dddddddd 3300 extendable
ip nat inside source static tcp 10.0.5.6 7 eeeeeeeee 7 extendable
ip nat inside source static udp 10.0.5.6 7 eeeeeeeee 7 extendable
ip nat inside source static tcp 10.0.5.6 25 eeeeeeeee 25 extendable
ip nat inside source static udp 10.0.5.6 25 eeeeeeeee 25 extendable
ip nat inside source static tcp 10.0.5.6 80 eeeeeeeee 80 extendable
ip nat inside source static udp 10.0.5.6 80 eeeeeeeee 80 extendable
ip nat inside source static tcp 10.0.5.6 6036 eeeeeeeee 6036 extendable
ip nat inside source static udp 10.0.5.6 6036 eeeeeeeee 6036 extendable
ip nat inside source static tcp 10.0.5.6 9008 eeeeeeeee 9008 extendable
ip nat inside source static udp 10.0.5.6 9008 eeeeeeeee 9008 extendable
ip nat inside source static tcp 10.0.5.6 10002 eeeeeeeee 10002 extendable
ip nat inside source static udp 10.0.5.6 10002 eeeeeeeee 10002 extendable
ip route 0.0.0.0 0.0.0.0 Dialer0 track 1
ip route 0.0.0.0 0.0.0.0 Dialer1 track 2
ip route 0.0.0.0 0.0.0.0 10.0.10.1 track 3
ip route 4.2.2.2 255.255.255.255 GigabitEthernet0/0
ip route 10.0.2.0 255.255.255.0 10.0.0.2
ip route 10.0.3.0 255.255.255.224 10.0.0.2
ip route 10.0.4.0 255.255.255.192 10.0.0.2
ip route 10.0.5.0 255.255.255.0 10.0.0.2
ip route 10.0.10.0 255.255.255.252 10.0.0.2
!
ip access-list extended SLA1
permit icmp any host 8.8.8.8 echo
permit tcp host (static ip public dialer 0) eq 22 any
permit udp host (static ip public dialer 0) eq 22 any
ip access-list extended SLA2
permit icmp any host 8.8.4.4 echo
permit tcp host (static ip public dialer 1) eq 22 any
permit udp host (static ip public dialer 1) eq 22 any
!
ip sla auto discovery
ip sla 1
icmp-echo 8.8.8.8 source-interface Dialer0
threshold 500
frequency 5
ip sla schedule 1 life forever start-time now
ip sla 2
icmp-echo 8.8.4.4 source-interface Dialer1
threshold 500
frequency 5
ip sla schedule 2 life forever start-time now
ip sla 3
icmp-echo 4.2.2.2 source-interface GigabitEthernet0/0
threshold 500
frequency 5
ip sla schedule 3 life forever start-time now
access-list 1 permit 10.0.2.0 0.0.0.255
access-list 1 permit 10.0.3.0 0.0.0.31
access-list 1 permit 10.0.4.0 0.0.0.63
access-list 1 permit 10.0.5.0 0.0.0.255
access-list 1 permit 10.0.10.0 0.0.0.3
access-list 100 permit udp host 10.0.5.2 eq 80 any
access-list 100 permit tcp host 10.0.5.2 eq 80 any
access-list 100 permit udp host 10.0.5.2 eq 25 any
access-list 100 permit tcp host 10.0.5.2 eq 25 any
access-list 100 permit udp host 10.0.5.2 eq 443 any
access-list 100 permit tcp host 10.0.5.2 eq 443 any
access-list 100 permit udp host 10.0.5.2 eq 5004 any
access-list 100 permit tcp host 10.0.5.2 eq 5004 any
access-list 100 permit udp host 10.0.5.2 eq 8080 any
access-list 100 permit tcp host 10.0.5.2 eq 8080 any
access-list 100 permit tcp host 10.0.5.3 eq 80 any
access-list 100 permit udp host 10.0.5.3 eq 80 any
access-list 100 permit tcp host 10.0.5.3 eq 12088 any
access-list 100 permit udp host 10.0.5.3 eq 12088 any
access-list 100 permit tcp host 10.0.5.3 eq 8016 any
access-list 100 permit udp host 10.0.5.3 eq 8016 any
access-list 100 permit tcp host 10.0.5.3 eq 8200 any
access-list 100 permit udp host 10.0.5.3 eq 8200 any
access-list 100 permit tcp host 10.0.5.3 eq 10019 any
access-list 100 permit udp host 10.0.5.3 eq 10019 any
access-list 100 permit tcp host 10.0.5.3 eq 10088 any
access-list 100 permit udp host 10.0.5.3 eq 10088 any
access-list 100 permit udp host 10.0.5.4 eq 80 any
access-list 100 permit tcp host 10.0.5.4 eq 80 any
access-list 100 permit udp host 10.0.5.5 eq 80 any
access-list 100 permit tcp host 10.0.5.5 eq 80 any
access-list 100 permit udp host 10.0.5.5 eq 23 any
access-list 100 permit tcp host 10.0.5.5 eq 23 any
access-list 100 permit udp host 10.0.5.5 eq 3300 any
access-list 100 permit tcp host 10.0.5.5 eq 3300 any
access-list 100 permit udp host 10.0.5.6 eq 80 any
access-list 100 permit tcp host 10.0.5.6 eq 80 any
access-list 100 permit udp host 10.0.5.6 eq 7 any
access-list 100 permit tcp host 10.0.5.6 eq 7 any
access-list 100 permit udp host 10.0.5.6 eq 25 any
access-list 100 permit tcp host 10.0.5.6 eq 25 any
access-list 100 permit udp host 10.0.5.6 eq 6036 any
access-list 100 permit tcp host 10.0.5.6 eq 6036 any
access-list 100 permit udp host 10.0.5.6 eq 9008 any
access-list 100 permit tcp host 10.0.5.6 eq 9008 any
access-list 100 permit udp host 10.0.5.6 eq 10002 any
access-list 100 permit tcp host 10.0.5.6 eq 10002 any
access-list 100 permit ip any any
!
route-map WWWSERVICE permit 10
match ip address 100
set interface Dialer0
!
route-map DIAL0 permit 10
match ip address 1
match interface Dialer0
!
route-map DIAL1 permit 10
match ip address 1
match interface Dialer1
!
route-map COMECAR_1 permit 10
match ip address 1
match interface GigabitEthernet0/0
!
route-map IPSLA permit 10
match ip address SLA1
set interface Dialer0
!
route-map IPSLA permit 20
match ip address SLA2
set interface Dialer1
!
route-map IPSLA permit 30
set interface GigabitEthernet0/0
!
!
!
control-plane
!
!
!
line con 0
password xxxxxxxx
logging synchronous
login local
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password xxxxxxxx
login local
transport input ssh
line vty 5 15
password xxxxxxxx
login local
transport input ssh
!
scheduler allocate 20000 1000
!
end