Newsgroup: it.comp.reti.cisco
Titolo: URGENTE !

HO UN PROBLEMONE su un 2610 con IoS 11.3.6(T) ..il quale mi fa un filtro sul
DNS...ma il problema ...è che non esiste alcuna ACL sul DNS...Anzi...e non
so + cosa fare....
version 11.3
service timestamps debug datetime
service timestamps log uptime
no service password-encryption
!
hostname xxxxxxxx
!
enable secret 5 $1$D/yM$l6rZRxu4gUip/U0VLG0tw0
enable password xxxxxxx!
username xxxx password 0 xxxxx
username xxxxx privilege 15 password 0 xxxxx
memory-size iomem 10
ip nat inside source list 102 interface Dialer2 overload
ip name-server 194.20.8.1
ip name-server 194.20.8.4
isdn switch-type basic-net3
!
!
!
!
interface BRI0/0
no ip address
encapsulation ppp
dialer pool-member 2
dialer pool-member 3
dialer pool-member 1
isdn switch-type basic-net3
isdn incoming-voice modem
no cdp enable
!
interface Ethernet0/0
ip address 192.168.2.254 255.255.255.0
ip access-group 102 in
ip nat inside
lat enabled
no cdp enable
!
interface Serial0/0
ip address 10.1.1.1 255.255.255.0
no ip directed-broadcast
encapsulation ppp
bandwidth 64
no cdp enable
!
interface Dialer1
description Collegamento verso Edue sede di Busto Arsizio
ip address 192.168.1.1 255.255.255.0
encapsulation ppp
bandwidth 64
dialer remote-name xxxxx
dialer idle-timeout 600
dialer string xxxx
dialer caller 3xxxxx
dialer pool 2
dialer-group 1
no cdp enable
ppp authentication chap
ppp chap hostname xxxx
ppp chap password 7 xxxxxx
!
interface Dialer2
description Collegamento verso Internet TIN
ip address negotiated
ip nat outside
encapsulation ppp
bandwidth 64
dialer remote-name ISP_TIN
dialer idle-timeout 200
dialer string xxxxxxxx
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap
ppp chap hostname wxxxxx
ppp chap password 7 12180911135F5C54
!
interface Dialer3
description Telelavoro
ip unnumbered Ethernet0/0
ip nat inside
encapsulation ppp
bandwidth 64
dialer remote-name telelavoro
dialer idle-timeout 200
dialer string xxxxxx
dialer caller xxxxxx
dialer pool 3
dialer-group 1
peer default ip address 192.168.2.250
no cdp enable
ppp authentication chap
ppp chap hostname xxxxxx
ppp chap password 7 141F17021F012429213A34
!
router eigrp 1
passive-interface BRI0/0
passive-interface Dialer1
passive-interface Dialer2
network 10.0.0.0
network 192.168.2.0
no auto-summary
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer2
ip route 192.168.0.0 255.255.255.0 Dialer1 200
!
logging buffered 10000 debugging
access-list 102 permit ip any any
access-list 110 deny   udp any eq netbios-ns any log
access-list 110 deny   udp any eq netbios-dgm any log
access-list 110 deny   tcp any eq 137 any log
access-list 110 deny   tcp any eq 138 any log
access-list 110 deny   tcp any any eq 137
access-list 110 deny   tcp any any eq 138
access-list 110 deny   tcp any any eq 139
access-list 110 deny   udp any any eq netbios-dgm log
access-list 110 deny   udp any any eq netbios-ns log
access-list 110 permit ip any any
dialer-list 1 protocol ip permit
no cdp run
!
!
translate tcp 192.168.2.252 lat A400
translate tcp 192.168.2.253 lat V4100
banner motd ^CC
^C
!
line con 0
line aux 0
line vty 0 4
password datagram
login local
!
end
xxxx#sh access
xxxxx#sh access-li
xxxxx#sh access-lists
Extended IP access list 102
    permit ip any any (3356 matches)
Extended IP access list 110
    deny udp any eq netbios-ns any log
    deny udp any eq netbios-dgm any log
    deny tcp any eq 137 any log
    deny tcp any eq 138 any log
    deny tcp any any eq 137
    deny tcp any any eq 138
    deny tcp any any eq 139
    deny udp any any eq netbios-dgm log
    deny udp any any eq netbios-ns log
    permit ip any any

 ha scritto nel messaggio
news:8kjvmm$75nm$1...@stargate1.inet.it...


...


 ha scritto nel messaggio
news:8kk0rd$3j1a$1...@stargate1.inet.it...
