>Вобщем в чем засада совсем не понимаю.... все как по книжкам....
>
>
>access-list outside_access_in; 4 elements
>access-list outside_access_in line 1 permit tcp 195.218.159.0 255.255.255.0 eq ssh host 195.218.236.178
>eq ssh (hitcnt=0)
>access-list outside_access_in line 2 permit tcp any host 192.168.0.8 eq ssh (hitcnt=0)
>
>access-list outside_access_in line 3 permit ip 195.218.159.0 255.255.255.0 host 195.218.236.178 (hitcnt=2)
>access-list outside_access_in line 4 permit ip 195.218.159.0 255.255.255.0 192.168.0.0 255.255.255.0 (hitcnt=0) Ja ocen izveniajus no v pervom otvete dopustil osibku v access-liste ...
Access-list imejut osobennost srabotav pervomu ostalnije acl'i ne rassmatrivajutsia ...
Delaj tak :
1.
no access-list 110 permit ip 192.168.0.0 255.255.255.0 any
no access-list outside_access_in permit tcp 195.218.159.0 255.255.255.0 eq ssh host 195.218.236.178 eq ssh
no access-list outside_access_in permit tcp any host 192.168.0.8 eq ssh
no access-list outside_access_in permit ip 195.218.159.0 255.255.255.0 no host 195.218.236.178
no access-list outside_access_in permit ip 195.218.159.0 255.255.255.0 192.168.0.0 255.255.255.0
no access-group outside_access_in in interface outside
2.
access-list 100 permit tcp 192.168.0.0 255.255.255.0 any // razresaesh hodit kompam v internet
access-list 101 permit tcp any host 195.218.236.178 eq 22 // razresaesh obrasenija k vneshmenu IP na 22 port (port ssh)
access-group 101 in interface outside // prikrepliajesh pravilo k 195.218.236.178
access-group 100 in interface inside // k 192.168.0.254
Ispolnuj 100 i 101 kak imena access-listov ...
Eto tocno rabotaet ja proverial na rabote ...
