Pix上的配置
interface Ethernet0
nameif outside
security-level 0
ip address 100.100.100.1 255.255.255.252
!
interface Ethernet1
nameif inside
security-level 100
ip address 172.16.10.1 255.255.255.0
!
access-list intoout extended permit ip 172.16.10.0 255.255.255.0 any
global (outside) 1 interface
nat (inside) 1 access-list intoout
!
access-list ping extended permit icmp any any
access-group ping in interface outside
route outside 0.0.0.0 0.0.0.0 100.100.100.2
Remote路由器
interface Loopback0
ip address 4.4.4.4 255.255.255.0
!
interface FastEthernet0/0
ip address 100.100.100.2 255.255.255.252
duplex auto
speed auto
!
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
no login
Local路由器
!
interface FastEthernet0/0
ip address 172.16.10.3 255.255.255.0
!
ip default-gateway 172.16.10.1
测试