cisco路由器配置问题!
我们单位用的是cisco1700路由。。我在内网的机器192.168.0.33上作了个FTP服务器。。端口是默认的21!路由器上做了NAT设置。。作了端口影射124.206.203.65的21影射到了192.168.0.33的21~~~~这样一来在外网就能通过124.206.203.65访问我的FTP服务器了。经过测试确实可以访问,可是我在内网的时候却不能通过127.206.203.65访问,只能通过192.168.0.33访问。。下面是我的路由的配置:
~
请大伙帮我看看咋回事。。另外access-list 1 permit 192.168.0.0 0.0.0.255是什么意思?我只是大体的明白是允许192.168.0.1-192.168.0.255的IP通过的意思,能给我具体讲讲不?
~
~
~
Router#sh run
Building configuration...
Current configuration : 4199 byt
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$GIds$QOnV7kTei5VQYb1PRk/ZI/
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
ip cef
!
!
!
no ip domain lookup
no ftp-server write-enable
!
!
!
!
interface Ethernet0
ip address 200.200.200.22 255.255.255.0 secondary
ip address 172.30.26.2 255.255.255.252
ip nat outside
half-duplex
!
interface FastEthernet0
ip address 192.168.0.1 255.255.255.0 secondary
ip address 124.206.203.65 255.255.255.240
ip nat inside
speed auto
!
interface Serial0
no ip address
shutdown
no fair-queue
!
ip nat pool jajx 124.206.203.78 124.206.203.78 netmask 255.255.255.240
ip nat inside source list 1 pool jajx overload
ip nat inside source static tcp 192.168.0.33 21 124.206.203.65 21 extendable
ip nat inside source static udp 192.168.0.33 21 124.206.203.65 21 extendable
ip classless
ip route 0.0.0.0 0.0.0.0 172.30.26.1
no ip http server
!
access-list 1 permit 192.168.0.0 0.0.0.255
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
password 7 1311110006050A2B27372D21232B10023F2A32
login
!
!
end
~
~
[ 本帖最后由 moonknight 于 2008-4-16 16:46 编辑 ]