Вот конф кусками .....
Building configuration...
Current configuration : 4527 bytes
!
! Last configuration change at 16:49:36 UTC Thu Sep 18 2008 by admin
! NVRAM config last updated at 17:29:58 UTC Wed Sep 17 2008 by admin
!
version 12.4
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service sequence-numbers
no service dhcp
!
hostname XXXXXX
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 10 log
security passwords min-length 6
logging buffered 4096 debugging
logging console critical
enable secret 5 XXXXXXXXXXXXXXXXXXXXXXX
enable password 7 XXXXXXXXXXXXX
!
aaa new-model
!
!
aaa authentication username-prompt login:
aaa authentication login default local
aaa authentication login local_auth local
aaa authentication ppp default group radius
aaa authorization exec default local if-authenticated
aaa authorization network default group radius
aaa accounting network default start-stop group radius
aaa accounting system default start-stop group radius
!
aaa session-id common
no ip source-route
no ip gratuitous-arps
ip cef
!
!
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
ip flow-egress input-interface
ip flow-cache timeout inactive 60
ip flow-cache timeout active 1
no ip bootp server
ip domain name XXXXXXXX
ip name-server XXX.XXX.XXX.XXX
i
!
!
!
!
username admin privilege 5 password 7 XXXXXXXXXXXXXX
username init privilege 8 password 7 XXXXXXXXXXXXXXXXXXXXXXXX
!
!
no ip rcmd domain-lookup
ip rcmd rcp-enable
ip rcmd rsh-enable
ip rcmd remote-host init XXX.XXX.XXX.XXX init enable
ip rcmd remote-username init
!
!
!
!
interface FastEthernet0/0
description LocalNet
ip address XXX.XXX.XXX.XXX 255.255.255.128
ip access-group 2 in
no ip redirects
no ip proxy-arp
ip flow ingress
ip flow egress
ip nat inside
ip virtual-reassembly
ip route-cache same-interface
speed auto
full-duplex
!
interface Serial0/0
bandwidth 2000
ip address XXX.XXX.XXX.XXX 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
shutdown
!
interface Ethernet1/0
description Internet
ip address XXX.XXX.XXX.XXX 255.255.255.0
no ip redirects
no ip proxy-arp
ip nat outside
ip virtual-reassembly
full-duplex
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 XXX.XXX.XXX.XXX
ip flow-export version 5
ip flow-export destination XXX.XXX.XXX.XXX 9996
!
no ip http server
no ip http secure-server
ip nat pool NATPool XXX.XXX.XXX.XXX XXX.XXX.XXX.XXX prefix-length 24
ip nat inside source list 1 pool NATPool overload
ip nat inside source static tcp XXX.XXX.XXX.XXX 25 XXX.XXX.XXX.XXX 25 extendable
..........
!
access-list 1 permit XXX.XXX.XXX.XXX 0.0.0.255
............
access-list 2 permit XXX.XXX.XXX.XXX 0.0.0.255
.............
access-list 105 dynamic TEST1 permit ip any any
no cdp run
!
control-plane
!
privilege exec level 8 access-template
privilege exec level 8 clear access-template
privilege exec level 8 clear
!
line con 0
exec-timeout 5 0
login authentication local_auth
transport output telnet
line aux 0
login authentication local_auth
transport output telnet
line vty 0 4
password 7 05000C08274248
login authentication local_auth
transport input telnet ssh
!
ntp clock-period 17208126
ntp server 193.125.143.173
ntp server 80.249.135.2
ntp server 77.234.200.98
ntp server 89.108.124.4
ntp server 85.21.125.66
end
rfw в логах соответственно пишет :
?Debug : Sep 18 20:30:11 FWCntl: Send rule<clear access-template 105 ip host XXX.XXX.XXX.XXX any> to remote cisco <XXX.XXX.XXX.XXX>
?Debug : Sep 18 20:30:11 FWCntl: Call RSH: host XXX.XXX.XXX.XXX, port 514, login init, pass XXXXXXXXXXXXXX, cmd clear access-temp
ERROR : Sep 18 20:30:11 FWCntl: RSH Connection error!
ERROR : Sep 18 20:30:11 FWCntl: RSH failed!
Я в принципе почемуто грешу на команды aaa они мне достались по наследству. Кошка в роли NAS не выступает.
Вобщем мозги закипели .............Кто подскажет куда копать ???
