sono 2 giorni che divendo pazzo.
Ho due cisco 837 speculari, ho fatto una VPN site-to-site tra loro ed e' su.
ma ho i seguenti problemi
lato a) vedo il router con l'ip interno 192.168.0.x ma non vedo il pc 192.168.0.y
lato b) vedo il router , il pc e la cartella condivisa ed accedo normalmente ad essa e scarico senza problemi
Vi ringrazio anticipatamente per la collaborazione
La configurazione del lato A e' la seguente ( il lato B e' simile )
------------------------------
Building configuration...
Current configuration : 3913 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname xxxxx
!
boot-start-marker
boot-end-marker
!
logging buffered 52000 debugging
logging monitor notifications
enable password
!
username xxxxx privilege 15 password
no aaa new-model
ip subnet-zero
!
!
ip name-server 62.94.0.1
ip name-server 62.94.0.2
ip audit notify log
ip audit po max-events 100
ip ssh break-string
no ftp-server write-enable
no scripting tcl init
no scripting tcl encdir
!
!
!
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp key xxxxxxx address 62.94.x.y
!
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
!
crypto map SDM_CMAP_1 1 ipsec-isakmp
description Tunnel to 62.94.x.y
set peer 62.94.x.y
set transform-set ESP-3DES-SHA
match address 100
!
partition flash 2 10 2
!
!
!
!
interface Ethernet0
ip address 192.168.1.200 255.255.255.0
ip nat inside
hold-queue 100 out
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
dsl operating-mode auto
hold-queue 224 in
!
interface FastEthernet1
no ip address
duplex auto
speed auto
!
interface FastEthernet2
no ip address
duplex auto
speed auto
!
interface FastEthernet3
no ip address
duplex auto
speed auto
!
interface FastEthernet4
no ip address
duplex auto
speed auto
!
interface Dialer0
description connessione ad internet ( PPPoA EUTELIA )
ip address a.b.c.d 255.255.255.0
ip nat outside
encapsulation ppp
dialer pool 1
ppp chap hostname xxxxxxxxxxxxx
ppp chap password
ppp pap sent-username xxxxxxxxxx password
crypto map SDM_CMAP_1
!
ip nat translation timeout 420
ip nat translation tcp-timeout 120
ip nat translation pptp-timeout 420
ip nat translation udp-timeout 120
ip nat translation finrst-timeout 300
ip nat translation syn-timeout 120
ip nat translation dns-timeout 300
ip nat translation icmp-timeout 120
ip nat translation max-entries 5000
ip nat inside source route-map SDM_RMAP_1 interface Dialer0 overload
ip nat inside source route-map SDM_RMAP_2 interface Dialer0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
ip http server
no ip http secure-server
!
!
access-list 1 remark SDM_ACL Category=16
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 23 remark SDM_ACL Category=17
access-list 23 permit 192.168.1.0 0.0.0.255
access-list 100 remark SDM_ACL Category=4
access-list 100 remark IPSec Rule
access-list 100 permit ip 192.168.1.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 101 remark SDM_ACL Category=2
access-list 101 remark IPSec Rule
access-list 101 deny ip 192.168.1.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 101 permit ip 192.168.1.0 0.0.0.255 any
access-list 102 remark SDM_ACL Category=2
access-list 102 remark IPSec Rule
access-list 102 deny ip 192.168.1.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 102 permit ip 192.168.1.0 0.0.0.255 any
snmp-server community visiospc RO
snmp-server trap-source Ethernet0
snmp-server enable traps tty
snmp-server host 192.168.1.2 visiospc
route-map SDM_RMAP_1 permit 1
match ip address 101
!
route-map SDM_RMAP_2 permit 1
match ip address 102
!
!
control-plane
!
!
line con 0
privilege level 15
no modem enable
transport preferred all
transport output all
stopbits 1
line aux 0
transport preferred all
transport output all
line vty 0 3
exec-timeout 120 0
password
login local
length 0
transport preferred all
transport input all
transport output all
line vty 4
access-class 23 out
exec-timeout 120 0
password
login local
length 0
transport preferred all
transport input telnet
transport output telnet
!
scheduler max-task-time 5000
!
end
