RTX1100の事教えてください(´・ω・｀)
外部固定IP"99.99.99.99"から123.123.123.123にブラウザでアクセスしたいのですが
認証画面で401が出てしまいます(内部からはRTX1100に入れます)
外部からtelnetでは入れます。pingに応答しません。configは下記のとおりです(多少端折ってますが)
security class 1 on on
ip route default gateway 111.111.111.111
ip lan1 address 192.168.1.1/24
ip lan1 proxyarp on
ip lan2 address 123.123.123.123/30
ip lan2 secure filter in 1 2 3
ip lan2 intrusion detection in on reject=on
ip lan2 nat descriptor 1
ip filter 1 reject-nolog * * udp,tcp 135,netbios_ns-netbios_ssn,445 *
ip filter 2 reject-nolog * * udp,tcp * 135,netbios_ns-netbios_ssn,445
ip filter 3 pass 99.99.99.99 123.123.123.123 * * *
ip filter 10 reject 192.168.1.0/24 * * * *
ip filter 11 pass * 192.168.1.0/24 icmp * *
ip filter 12 pass * 192.168.1.0/24 established * *
ip filter 13 pass * 192.168.1.0/24 tcp * ident
ip filter 14 pass * 192.168.1.0/24 tcp ftpdata *
ip filter 15 pass * 192.168.1.0/24 udp domain *
ip filter 16 pass * 123.123.123.123 tcp * telnet
ip filter 1000 pass * 192.168.1.1 tcp * 1723
ip filter 1001 pass * 192.168.1.1 gre
nat descriptor type 1 masquerade
nat descriptor address outer 1 123.123.123.123
nat descriptor masquerade static 1 1 123.123.123.123 tcp telnet
nat descriptor masquerade static 1 2 192.168.1.1 tcp 1723
nat descriptor masquerade static 1 3 192.168.1.1 gre
nat descriptor address inner 2 123.123.123.123 192.168.1.1-192.168.1.99 192.168.1.254