Newsgroup: it.comp.reti.cisco
Titolo: Cisco 1841 risolve gli indirizzi, la LAN no

Ciao a tutti,
con l'aiuto di questo forum sono quasi riuscito a configurare un Cisco
1841 con l'HDSL di Telecom.
Mi spiego meglio per il quasi:
rete interna 10.0.0.x
Zywall con porta WAN 192.168.1.39 a cui è collegato il cisco
192.168.1.27
Se dal router cisco faccio ping 
www.google.it
 OK Funziona
Se dal 192.168.1.39 faccio ping 
www.google.it
 NON Funziona
Se dal 192.168.1.39 ping faccio ping 74.125.43.147 OK Funziona
Se da un PC della LAN faccio ping in qualsiasi modo NON funziona
Non riesco più a venirne fuori, aiutooooo
Vi giro la configurazione:
Cisco#sh run
Building configuration...
Current configuration : 2431 bytes
!
version 12.4
service nagle
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname Cisco
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 5 log
logging message-counter syslog
enable secret 5 <password>
enable password 7 <password>
!
no aaa new-model
dot11 syslog
no ip source-route
no ip gratuitous-arps
ip icmp rate-limit unreachable 1000
!
!
!
!
ip cef
ip domain name 
interbusiness.it
ip name-server 151.99.125.3
multilink bundle-name authenticated
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
interface Loopback0
ip address 94.xxx.xxx.x81 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.1.27 255.255.255.0
ip accounting output-packets
ip accounting access-violations
ip flow ingress
ip nat inside
ip virtual-reassembly
no ip mroute-cache
duplex auto
speed auto
no mop enabled
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1/0
bandwidth 2048
no ip address
encapsulation frame-relay IETF
no fair-queue
frame-relay lmi-type cisco
!
interface Serial0/1/0.423 point-to-point
bandwidth 2048
ip address 88.yyy.yyy.y50 255.255.255.252
ip verify unicast reverse-path
no ip redirects
no ip unreachables
no ip proxy-arp
ip accounting access-violations
ip nat outside
ip virtual-reassembly
no ip mroute-cache
snmp trap ip verify drop-rate
snmp trap link-status
no cdp enable
no arp frame-relay
frame-relay interface-dlci 423 IETF
!
ip local pool test-pool 10.0.0.0 10.0.0.255
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Serial0/1/0.423
ip route 0.0.0.0 0.0.0.0 Loopback0
ip route 0.0.0.0 0.0.0.0 88.yyy.yyy.y49
ip route 10.0.0.0 255.255.255.0 Serial0/1/0.423
ip route 10.0.0.0 255.255.255.0 88.yyy.yyy.y49
ip route 151.99.0.0 255.255.0.0 Serial0/1/0.423
ip route 151.99.0.0 255.255.0.0 Loopback0
ip route 151.99.0.0 255.255.0.0 88.yyy.yyy.y49
!
ip http server
no ip http secure-server
!
ip nat inside source list NAT interface Loopback0 overload
!
ip access-list extended NAT
permit ip host 10.0.0.57 any
permit ip host 192.168.1.39 any
permit ip host 10.0.0.35 any
!
snmp-server community public RO
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
password 7 <password>
login
!
scheduler allocate 20000 1000
end
Spero che riusciate a darmi qualche indicazione perchè ho la testa che
fuma ormai
Stefano
Rolling Eyes Rolling Eyes
_________________

>Non riesco pi� a venirne fuori, aiutooooo
Ti do due suggerimenti sui quali lavorare:
hai troppe default routes
devi rivedere l'access list NAT.
Ciao,
         Tosh.