выборка из конфика cisco interface Vlan913 description Megafon_SIP ip address 10.73.26.27 255.255.255.0 ip access-group IN_MEG in ip access-group IN_MEG out no ip redirects no ip unreachables no ip proxy-arp ip nat outside ip virtual-reassembly in ! interface GigabitEthernet0/1 description Local ip address 192.168.19.2 255.255.255.0 secondary ip address 192.0.0.1 255.255.255.0 secondary ip address 192.1.0.1 255.255.255.0 secondary ip address 192.168.1.1 255.255.255.0 ip access-group LOCAL_ACL in no ip redirects no ip unreachables no ip proxy-arp ip flow ingress ip flow egress ip nat inside ip inspect OUT in ip inspect OUT out ip virtual-reassembly in ip policy route-map ROUTE_RULES duplex auto speed auto no ip nat service sip tcp port 5060 no ip nat service sip udp port 5060 ip nat inside source route-map MEGAFON_SIP interface Vlan913 overload ip nat inside source static tcp 192.168.1.183 5060 10.73.26.27 5060 extendable ip nat inside source static udp 192.168.1.183 5060 10.73.26.27 5060 extendable ip access-list extended IN_ACL permit tcp any any eq 5060 permit udp any any eq 5060 ! ! ip access-list extended IN_MEG permit icmp any any permit ip any any ! route-map ROUTE_RULES permit 19 match ip address 134 set ip next-hop 10.73.26.1 route-map MEGAFON_SIP permit 10 match ip address 1 match interface Vlan913 access-list 1 permit 192.168.0.0 0.0.255.255 access-list 134 permit ip any host 10.108.81.38 access-list 134 permit ip any 10.108.0.0 0.0.255.255 access-list 134 permit ip any host 10.73.23.137 |