【求助】Pix的一個大問題

[stevenpeng]

: Saved
:
PIX Version 6.1(1)
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 intf2 security10
fixup protocol ftp 21
fixup protocol http 80
fixup protocol h323 1720
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol sip 5060
fixup protocol skinny 2000
names
name 210.242.163.1 exchange
name 210.242.163.33 web
name 210.242.163.22 dhcp22
name 210.242.163.21 dhcp21
name 210.242.163.29 dhcp29
name 210.242.163.28 dhcp28
name 210.242.163.27 dhcp27
name 210.242.163.26 dhcp26
name 210.242.163.25 dhcp25
name 210.242.163.24 dhcp24
name 210.242.163.23 dhcp23
name 210.242.163.62 router
name 210.242.163.30 dhcp30
name 210.242.163.32 dmz
name 210.242.163.19 goout
name 210.242.163.0 inside
access-list outside_access_in permit tcp any host 61.221.179.59 eq smtp
access-list outside_access_in permit udp any host 61.221.179.59 eq domain
access-list outside_access_in permit tcp any host 61.221.179.59 eq pop3
access-list outside_access_in permit tcp any host 61.221.179.59 eq domain
access-list outside_access_in permit tcp any host 61.221.179.60 eq www
access-list outside_access_in permit udp any host 61.221.179.60 eq domain
access-list outside_access_in permit tcp any host 61.221.179.60 eq domain
access-list outside_access_in permit icmp any any echo-reply
access-list outside_access_in permit ip host 211.79.140.205 any
access-list inside_access_in deny ip host dhcp21 any
access-list inside_access_in deny ip host dhcp22 any
access-list inside_access_in deny ip host dhcp23 any
access-list inside_access_in deny ip host dhcp24 any
access-list inside_access_in deny ip host dhcp25 any
access-list inside_access_in deny ip host dhcp26 any
access-list inside_access_in deny ip host dhcp27 any
access-list inside_access_in deny ip host dhcp28 any
access-list inside_access_in deny ip host dhcp29 any
access-list inside_access_in deny ip host dhcp30 any
access-list inside_access_in permit tcp any host web eq www
access-list inside_access_in permit ip any any
access-list inside_access_in permit tcp any any
access-list inside_access_in permit tcp inside 255.255.255.240 any
access-list inside_access_in permit tcp host goout any
access-list inside_access_in permit ip any host web
access-list inside_access_in permit tcp any host web
access-list inside_access_in permit icmp any any
access-list intf2_access_in permit tcp host web any
access-list inside_outbound_nat0_acl permit ip inside 255.255.255.224 192.168.2.0 255.255.255.0
access-list outside_cryptomap_20 permit ip inside 255.255.255.224 192.168.2.0 255.255.255.0
access-list outside_cryptomap_20 permit icmp inside 255.255.255.224 192.168.2.0 255.255.255.0
pager lines 24
interface ethernet0 auto
interface ethernet1 auto
interface ethernet2 auto
mtu outside 1500
mtu inside 1500
mtu intf2 1500
ip address outside 61.221.179.58 255.255.255.248
ip address inside 210.242.163.2 255.255.255.224
ip address intf2 210.242.163.46 255.255.255.240
ip audit info action alarm
ip audit attack action alarm
pdm location 210.242.163.10 255.255.255.255 inside
pdm location exchange 255.255.255.255 inside
pdm location web 255.255.255.255 intf2
pdm location dhcp21 255.255.255.255 inside
pdm location dhcp22 255.255.255.255 inside
pdm location dhcp23 255.255.255.255 inside
pdm location dhcp24 255.255.255.255 inside
pdm location dhcp25 255.255.255.255 inside
pdm location dhcp26 255.255.255.255 inside
pdm location dhcp27 255.255.255.255 inside
pdm location dhcp28 255.255.255.255 inside
pdm location dhcp29 255.255.255.255 inside
pdm location dhcp30 255.255.255.255 inside
pdm location router 255.255.255.255 outside
pdm location inside 255.255.255.240 inside
pdm location inside 255.255.255.0 inside
pdm location 211.79.140.205 255.255.255.255 outside
pdm location 210.242.163.18 255.255.255.255 inside
pdm location 210.242.163.12 255.255.255.255 inside
pdm location 210.242.163.2 255.255.255.255 inside
pdm location goout 255.255.255.255 inside
pdm location 220.130.142.210 255.255.255.255 outside
pdm history enable
arp timeout 14400
global (outside) 1 interface
global (intf2) 2 interface
nat (inside) 0 access-list inside_outbound_nat0_acl
nat (inside) 1 inside 255.255.255.0 0 0
nat (inside) 2 0.0.0.0 0.0.0.0 0 0
nat (intf2) 1 dmz 255.255.255.240 0 0
static (inside,outside) 61.221.179.59 exchange netmask 255.255.255.255 0 0
static (intf2,outside) 61.221.179.60 web netmask 255.255.255.255 0 0
access-group outside_access_in in interface outside
access-group inside_access_in in interface inside
access-group intf2_access_in in interface intf2
route outside 0.0.0.0 0.0.0.0 61.221.179.57 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
http server enable
http exchange 255.255.255.255 inside
http 210.242.163.12 255.255.255.255 inside
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
sysopt connection permit-ipsec
no sysopt route dnat

從以上的文章中.那一位高手大大能夠幫忙解決一下.到底是那一些中有問題讓我的210.242.163.32~210.242.163.253都無法到outside去
假如我要將現有的網段加大由210.242.163.1~210.242.163.30加大至210.242163.1~210.242.163.253我應該怎麼去修改這個pix的設定