> Если нат, то сеть не транзитная, т.е. 192ая -это не сеть провайдера.
> Может когда вы делаете пинг, то соурс адрес не тот который
> ожидает увидеть провайдер? Может попробовать руками задать сорс при пинге? Хотя
> я в это слабо верю, но мало ли что бывает)))
> ЗЫ: Еще может помочь debug ip packet (осторожно! из-за большой активности может
> повесить доступ к роутеру!) 192.168.х.0 - это мои сети, 10.8.188.0 - сеть ISP, 10.8.188.10 - адрес выданный мне ISP, 79.173.80.1 - один из DNS провайдера.
Пинги:
Router_GSZ#ping 79.173.80.1 source 192.168.9.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 79.173.80.1, timeout is 2 seconds:
Packet sent with a source address of 192.168.9.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/4/12 ms
Debug (1 repeat):
*Jul 12 07:02:41.547: IP: s=192.168.9.1 (local), d=79.173.80.1, len 100, local feature, NAT(2), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 12 07:02:41.547: IP: s=192.168.9.1 (local), d=79.173.80.1 (FastEthernet0/0), len 100, sending
*Jul 12 07:02:41.547: IP: s=10.8.188.10 (local), d=79.173.80.1 (FastEthernet0/0), len 100, output feature, Post-routing NAT Outside(24), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 12 07:02:41.547: IP: s=10.8.188.10 (local), d=79.173.80.1 (FastEthernet0/0), len 100, output feature, Stateful Inspection(27), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 12 07:02:41.547: IP: s=10.8.188.10 (local), d=79.173.80.1 (FastEthernet0/0), len 100, output feature, NAT ALG proxy(55), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 12 07:02:41.547: IP: s=10.8.188.10 (local), d=79.173.80.1 (FastEthernet0/0), len 100, sending full packet
*Jul 12 07:02:41.551: IP: s=79.173.80.1 (FastEthernet0/0), d=192.168.9.1, len 100, input feature, Stateful Inspection(5), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 12 07:02:41.551: IP: s=79.173.80.1 (FastEthernet0/0), d=192.168.9.1, len 100, input feature, Virtual Fragment Reassembly(25), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 12 07:02:41.551: IP: s=79.173.80.1 (FastEthernet0/0), d=192.168.9.1, len 100, input feature, Virtual Fragment Reassembly After IPSec Decryption(39), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 12 07:02:41.551: IP: s=79.173.80.1 (FastEthernet0/0), d=192.168.9.1, len 100, input feature, NAT Outside(66), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 12 07:02:41.551: IP: s=79.173.80.1 (FastEthernet0/0), d=192.168.9.1, len 100, input feature, MCI Check(80), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 12 07:02:41.551: IP: tableid=0, s=79.173.80.1 (FastEthernet0/0), d=192.168.9.1 (FastEthernet0/0/0.9), routed via RIB
*Jul 12 07:02:41.551: IP: s=79.173.80.1 (FastEthernet0/0), d=192.168.9.1 (FastEthernet0/0/0.9), len 100, output feature, NAT Inside(8), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 12 07:02:41.551: IP: s=79.173.80.1 (FastEthernet0/0), d=192.168.9.1 (FastEthernet0/0/0.9), len 100, output feature, Stateful Inspection(27), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 12 07:02:41.551: IP: s=79.173.80.1 (FastEthernet0/0), d=192.168.9.1, len 100, rcvd 4
*Jul 12 07:02:41.551: IP: s=79.173.80.1 (FastEthernet0/0), d=192.168.9.1, len 100, stop process pak for forus packet
Router_GSZ#ping 79.173.80.1 source 10.8.188.10
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 79.173.80.1, timeout is 2 seconds:
Packet sent with a source address of 10.8.188.10
.....
Success rate is 0 percent (0/5)
Debug (1 repeat):
*Jul 12 07:01:40.059: IP: s=10.8.188.10 (local), d=79.173.80.1, len 100, local feature, NAT(2), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
*Jul 12 07:01:40.059: IP: s=10.8.188.10 (local), d=79.173.80.1 (FastEthernet0/0), len 100, sending
*Jul 12 07:01:40.059: IP: s=10.8.188.10, d=79.173.80.1, pak 4963D63C consumed in output feature , packet consumed, Post-routing NAT Outside(24), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE.
