求助,思科ASA9.1版本的,直连ping不通。策略都放行了/ w* J& H. t7 l# ? Y" z, Q( l4 L5 |
. M' b1 g" w) u2 Y; x' U c1 n
ciscoasa(config)# show run access-list 4 F: ?, C" W4 O- U$ ~- B
access-list myin extended permit ip any any 8 n! e3 u0 y8 O
access-list muout extended permit ip any any
: G$ ?3 b: ?' Dciscoasa(config)# show run access-group " j& _- G) Z$ B; O, f" o, r. T' D; _
access-group myin in interface inside- H7 m* q* s; a+ g7 j* r
access-group myin out interface inside# w) {) h* N7 u2 l5 e( v/ V( p: i
access-group muout in interface outside7 G- L, {; c; ]) P8 d$ a3 L
access-group muout out interface outside
4 H! H }! Q5 n U4 e+ bciscoasa(config)# show run icmp
& Q C! C# B P' Aicmp unreachable rate-limit 1 burst-size 1
0 c4 P F3 I$ h7 p- n$ @# Hicmp permit any inside1 w/ y4 l; _, q7 [$ L* I
icmp permit any outside
( i, W6 k. F6 ?* M, X2 A' G/ L' |
0 i8 q6 d$ `* p7 s1 B6 g( ]
5 c* G/ l4 u# V3 O1 A6 C2 q" M# ~# C" y- f! b+ g( {' a& g' D
|