求助：我的PIX为什么这么配置还不能用~上不了网

PIX配置好后连接交换机，再用了台PC连接交换机，PC和PIX再一个网段，但是ping的通联通给的地址,ping不通外网的网关，更别提网站了。配置如下
PIX Version 6.3(3)
3 E3 K) ?% R! u: Dinterface ethernet0 auto
interface ethernet1 auto
nameif ethernet0 outside security0
% ^- Y7 ~* b/ Enameif ethernet1 inside security100
' Y8 d9 I2 c( ?, w; Eenable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
hostname pix515e
2 n& r0 h( x, s! B# }domain-name aubridgegroup.com
2 [1 Z. s; Q% `8 C2 W7 Ofixup protocol dns maximum-length 512
fixup protocol ftp 21
. i/ T( j, A( o' L: sfixup protocol h323 h225 1720
3 Z% D, @( B/ r, C0 Efixup protocol h323 ras 1718-1719
3 o9 i0 b2 D5 y3 \# H" Mfixup protocol http 80
; B  m& k1 _; a6 Pfixup protocol rsh 514
fixup protocol rtsp 554
9 x% w8 O3 f: H  ufixup protocol sip 5060
fixup protocol sip udp 5060
( R8 j4 w0 _/ w, J% y4 P3 z9 _fixup protocol skinny 2000
, w' ^/ M: S  f# G8 P9 ]fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
0 Y1 R  m; J) G, k' A2 D8 e. lnames
, y' t! A2 P& W* F+ Laccess-list 80 permit ip 192.168.2.0 255.255.255.0 192.168.3.0 255.255.255.0
access-list 101 permit ip 192.168.2.0 255.255.255.0 192.168.3.0 255.255.255.0
access-list 101 permit icmp 192.168.2.0 255.255.255.0 192.168.3.0 255.255.255.0
access-list 102 permit icmp any any
access-list 103 permit ip any 112.64.141.0 255.255.255.0
: W. e3 G! _+ U) bpager lines 24
5 }% a: V3 [8 C1 k9 omtu outside 1500
4 b' j, z* O$ {, ~/ [/ i' i9 O) K. B; xmtu inside 1500
" b( p6 U' i4 Sip address outside 112.64.141.122 255.255.255.0
ip address inside 192.168.2.15 255.255.255.0
. h8 C) ^- ]! T" L& hip audit info action alarm
" y) o3 N' A$ F& L6 Xip audit attack action alarm
4 ~$ K' d4 w! V( B3 K8 ~* ~ip local pool dialerl 192.168.2.241-192.168.2.249
pdm history enable
- p& ~) T# q# H( L% i2 L7 harp timeout 14400
& b0 X# w! ^% L+ a& ?global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
access-group 80 in interface outside
4 V8 ^" n7 U) o/ V- Htimeout xlate 3:00:00
8 o8 _' p% \$ X2 y! Dtimeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
7 J* M/ n* d) Z; w. ttimeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
% F" Y1 g. A2 T9 C$ J7 |( B, saaa-server RADIUS protocol radius
- B7 l* l2 m* J. n3 m" waaa-server LOCAL protocol local
no snmp-server location
no snmp-server contact
snmp-server community public
; ~! H, R" N: ^no snmp-server enable traps
floodguard enable
telnet timeout 5
$ W1 P' P3 A% Mssh timeout 5
- H! d/ E4 g4 f: d+ ^, C1 R  m9 W  h: }console timeout 0
. }+ S  k8 a* O5 q2 R& B/ L6 tterminal width 80
; m) |  h  ?& X# O( @3 ~+ rCryptochecksum:3ce5c7f1d4ffa817ec7e6890d7b5b299
' C, Z  C9 {* `) M: end

补充：route outside 0.0.0.0 0.0.0.0 112.64.141.121 1这条加了也不能上

看不懂呀。。。

什么看不懂？我表达不清？

来学习了.

inside 没有做访问列表，outside 的改成access-list 80 permit ip any any  试一下。

谢谢，我去试试

试过了~下面那个样还是没用。
PIX Version 6.3(3)
# H* D7 Q+ m# d+ w& Z* m4 T" c  Finterface ethernet0 auto
2 }+ ]: S/ s8 A- t1 I* k2 |; A! `interface ethernet1 auto
0 \5 `1 V5 l* w# ]5 linterface ethernet2 auto shutdown
" Z( T6 q0 {3 |, R( t% i0 Nnameif ethernet0 outside security0
nameif ethernet1 inside security100
+ r! }: ]; U/ n/ {nameif ethernet2 intf2 security4
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
hostname pixfirewall
fixup protocol dns maximum-length 512
& ^. a( R* E# G& vfixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
1 b/ k+ d, }- Ifixup protocol http 80
) j1 Z! \" q' m% Xfixup protocol rsh 514
( Y" n, _' W, D) Xfixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
5 d/ T' i4 Z: L+ [" lfixup protocol sqlnet 1521
  r; }2 Y+ Q$ f. f% A0 _' J7 Z5 \fixup protocol tftp 69
names
9 h  D- ?5 N& _' _" j  T) Maccess-list 80 permit ip any any
access-list 101 permit ip 192.168.2.0 255.255.255.0 192.168.3.0 255.255.255.0
# _8 r1 s* t  {  saccess-list 101 permit icmp 192.168.2.0 255.255.255.0 192.168.3.0 255.255.255.0
access-list 102 permit icmp any any
access-list 103 permit ip any 112.64.141.0 255.255.255.0
% K5 P7 F" g' ~6 m7 Ppager lines 24
mtu outside 1500
* ~3 ]7 m6 t6 K9 |0 ~, ]# cmtu inside 1500
mtu intf2 1500
ip address outside 112.64.141.122 255.255.255.0
ip address inside 192.168.2.3 255.255.255.0
) F, l2 e; O8 f( Cno ip address intf2
# F- U( T0 ]! Xip audit info action alarm
, z( i+ k: D* j* Y5 Gip audit attack action alarm
) v  @  [8 s$ x  d* I0 ?2 zpdm history enable
! K3 R0 O3 Z+ Z1 zarp timeout 14400
9 g2 w) Q- o' h$ Pglobal (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
route outside 0.0.0.0 0.0.0.0 112.64.141.121 1
0 |! b, T9 m4 H8 N$ I. itimeout xlate 3:00:00
- I! P8 F/ ?3 \  c1 V) C8 itimeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
8 A( r  u# i! ~/ l# f  d$ vtimeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
7 {3 [: B" v( U. m5 `3 G/ ptimeout uauth 0:05:00 absolute
6 D5 B3 t7 M1 N9 f: s. A0 a* jaaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
& K) c0 B% U( ^! H8 k& Kaaa-server LOCAL protocol local
6 G7 G: F$ a9 f* o( i: C1 jno snmp-server location
* W4 \5 R2 Y, z: x& l$ d$ s: vno snmp-server contact
snmp-server community public
& ?/ H" Z  _2 J) wno snmp-server enable traps
floodguard enable
: J6 J; O) D: r6 p0 u* T' j. Qtelnet timeout 5
ssh timeout 5
console timeout 0
+ ]$ _' t' U- \. ^8 Xterminal width 80
: Y& r8 f7 R9 N; H5 Q0 q8 R- TCryptochecksum:fc9dccbcea300e72b9fc0d1cf3c73f00
8 J5 @- L( z0 g/ |; j: end

没看完~~~~~~ 先顶，好同志

谢谢楼主，共同发展