拓扑和配置 配置哪块有问题?(在线等)

lincool

20.1.1.1-route-172.16.0.1---172.16.0.2-pix-192.168.0.1 ---switch--15台pc

在route和pix上都配上nat 把192网段nat到172 把172网段在往公网上nat 实现15台pc上网 配置什么地方有问题?

配置如下

Pix(config)#nameif ethernet0 outside security0
Pix(config)#nameif ethernet1 inside security100
Pix(config)#ip address outside 172.16.0.2 255.255.255.255
Pix(config)#ip address inside 192.168.0.1 255.255.255.0
Pix(config)#nat (inside) 1 0 0
Pix(config)#global (outside) 1 172.16.0.3-172.16.0.254
Pix(config)#route outside 0 0 172.16.0.1 1

route配置
interface Ethernet0/0
ip address 172.16.0.1 255.255.255.0
ip nat inside

interface Serial0/0
ip address 20.1.1.1 255.255.255.0
ip nat outside

ip access-list 1 permit 192.168.0.0

ip nat pool wind 20.1.1.2 20.1.1.20 netmask 255.255.255.0
ip nat inside source list 1 pool wind

wonderliang

珊了ip access-list 1 permit 192.168.0.0
改为ip access-list 1 permit 172.16.0.0
建议pix不要做nat，否则太麻烦。