可以ping默认网关,但不能上网

网络工程 路由 思科-ASA
2022-02-03 19:47:16

我有一个具有以下配置的 Cisco ASA 5506-X:

!
interface GigabitEthernet1/1
 nameif outside
 security-level 0
 ip address *.*.114.179 255.255.255.240 
!
interface GigabitEthernet1/2
 nameif inside
 security-level 100
 ip address 10.247.1.1 255.255.255.0 
!
interface GigabitEthernet1/3
 nameif backup
 security-level 1
 ip address *.*.*.97 255.255.255.252 
!

access-list inside_access_in extended permit ip 10.247.1.0 255.255.255.0 any log 
access-list outside_access_in extended permit ip any 10.247.1.0 255.255.255.0 

object network inside_lan
 nat (any,outside) dynamic interface

route outside 0.0.0.0 0.0.0.0 *.*.114.177 128

使用此配置,我可以从内部网络 (10.247.1.0/24) - 访问(ping)默认网关(. .114.177),仅此而已,无法建立 Internet 连接。这个配置有什么问题,或者配置没问题,我应该去别处看看?

1个回答

我相信你错过了:

object network inside_lan
    Subnet 10.247.1.0 255.255.255.0

在不相关的注释中,您可能需要删除access-list outside_access_in