ASA 端口映射，如何允许外面ping 作了端口映射的IP

xiaogouchong

object network test-192.168.1.2
nat (inside,outside) static interface

xiaogouchong

ciscoasa# show xlate
1 in use, 1 most used
Flags: D - DNS, i - dynamic, r - portmap, s - static, I - identity, T - twice
NAT from inside:192.168.1.2 to outside:114.114.114.113
    flags s idle 0:04:19 timeout 0:00:00

xiaogouchong

还不行抓个包看下
ciscoasa# show capture cap

52 packets captured

   1: 21:02:29.182638 58.247.96.100.137 > 58.247.96.255.137:  udp 50
   2: 21:02:29.931912 58.247.96.100.137 > 58.247.96.255.137:  udp 50
   3: 21:02:30.682246 58.247.96.100.137 > 58.247.96.255.137:  udp 50
   4: 21:02:32.145286 123.1.1.1 > 114.114.114.113: icmp: echo request
   5: 21:02:32.156028 114.114.114.113 > 123.1.1.1: icmp: echo reply
   6: 21:02:32.187948 123.1.1.1 > 114.114.114.113: icmp: echo request
   7: 21:02:32.198582 114.114.114.113 > 123.1.1.1: icmp: echo reply
   8: 21:02:32.230533 123.1.1.1 > 114.114.114.113: icmp: echo request
   9: 21:02:32.240588 114.114.114.113 > 123.1.1.1: icmp: echo reply
  10: 21:02:32.273179 123.1.1.1 > 114.114.114.113: icmp: echo request
  11: 21:02:32.283280 114.114.114.113 > 123.1.1.1: icmp: echo reply
  12: 21:02:32.315779 123.1.1.1 > 114.114.114.113: icmp: echo request
  13: 21:02:32.326414 114.114.114.113 > 123.1.1.1: icmp: echo reply

吉隆坡的胖纸

哈哈哈哈哈哈  我只是来看看的 ASA要看IOS的

baifuwa

吉隆坡的胖纸 发表于 2015-7-5 05:43
哈哈哈哈哈哈  我只是来看看的 ASA要看IOS的

我的IOS是9.4