PIX实验江湖救急？！！！

实验模拟器：

在别人的基础上，自己改的。

实验拓扑：

经过测试，这个模拟器，许多命令不支持。1.9 PIX模拟器不太好用。

换个模拟器;看这个：

 

 

 

dmz-router:

enable
config t
int f0/0
ip add 172.16.1.2 255.255.255.0
no shutdown
exit
ip route 0.0.0.0 0.0.0.0  f0/0

 

inside-router:

enable
config t
int f0/1
ip add 10.0.2.1 255.255.255.0
no shutdown
int f0/0
ip add 10.0.1.2 255.255.255.0
no shutdown
exit
ip route 0.0.0.0 0.0.0.0 f0/0

outside-router:

enable
config t
int f0/0
ip address 192.168.1.1 255.255.255.0
no shutdown
int f0/1
ip add 172.26.26.150 255.255.255.0
no shutdown
exit
ip route 172.16.1.0 255.255.255.0 192.168.1.2
ip route 10.0.0.0 255.0.0.0 192.168.1.2

 

PIX:

pix:
内网访问外网：A:做路由B:做NAT
外网访问内网：A:做路由B:做映射
内网到外网参考代码：
route outside 0 0 192.168.1.1 1 
route inside 10.0.2.0 255.255.255.0 10.0.1.2 1
route dmz  10.0.2.0 255.255.255.0 10.0.1.2
route dmz 0 0 192.168.1.1
nat (inside) 1 10.0.1.0 255.255.255.0
global (outside) 1 192.168.1.10-192.168.1.20
global (dmz) 1 172.16.1.10-192.168.1.20

外网到内网参考代码:
route outside 0 0 192.168.1.1 1 
route inside 10.0.2.0 255.255.255.0 10.0.1.2 1
route dmz  10.0.2.0 255.255.255.0 10.0.1.2
route dmz 0 0 192.168.1.1
static (inside,outside) 192.168.1.22  10.0.2.2
access-list 100 permit ip any host 192.168.1.22 eq www
access-list 100 deny ip any any
access-group 100 in interface outside
fixup protocol http 80

enable
config t
hostname pix525
domain-name xiaoxiao.com
pager lines 24                
ip audit info action alarm
ip audit attack action alarm
arp timeout 14400
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 dmz security50
interface ethernet0 auto
interface ethernet1 auto
interface ethernet2 auto
mtu outside 1500
mtu inside 1500
ip address outside 192.168.1.2 255.255.255.0
ip address inside 10.0.1.1 255.255.255.0
ip address dmz 172.16.1.1 255.255.255.0
nat (inside) 1 10.0.1.0 255.255.255.0
global (outside) 1 192.168.1.10-192.168.1.20
global (dmz) 1 172.16.1.10-172.16.1.20
route outside 0 0 192.168.1.1 1 
route inside 10.0.2.0 255.255.255.0 10.0.1.2 1
route dmz  10.0.2.0 255.255.255.0 10.0.1.2
route dmz 0 0 192.168.1.1
static (inside,outside) 192.168.1.22  10.0.2.2
access-list 100 permit tcp any host 192.168.1.22 eq www
access-group 100 in interface outside
fixup protocol http 80

 

出现的问题是，内外相互ping不同，求高手指点下，PIX是6.5的

conduit 和fixup 命令都支持，access-list命令也支持。求高手指点我的服务器访问成功不？ping和telnet如何实现？急求高手指点。