[求助] cisco配置问题,急!

补充资料

以下的配置中存在一个错误:请高手帮忙,不胜感激!!

User:cisco
Pass:logincisco

Building configuration...

Current configuration:2631 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R-Internet
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
username cisco privilege 15 secret 5 $1$8JHlsakdjmvla
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
ip nbar pdlm bittorrent.pdlm
ip nbar pdlm eDonkey.pdlm
ip nbar pdlm kazaa2.pdlm
!
!
ip domain name yourdomain.com
no ftp-server write-enable
!
!
!
class-map match-all bittorrent

match protocol bittorrent

match protocol edonkey

match protocol kazaa2
!
!
policy-map bittorrent-policy

class bittorrent

drop
!
!
!
interface FastEthernet0/0
description Connect_Internet
ip address 218.5.67.131 255.255.255.240
ip access-group 131 in
ip nat outside
duplex auto
speed auto
!
interface FastEthernet0/1

ip address 192.168.232.12 255.255.255.0

ip nat inside

service-policy input bittorrent-policy

service-policy output bittorrent-policy

ip route-cache same-interface

ip route-cache policy

ip route-cache flow

duplex auto

speed auto
!
ip nat translation timeout 300
ip nat translation tcp-timeout 300
ip nat translation syn-timeout 3
ip nat translation port-timeout tcp 80 60
ip nat translation max-entries 2000
ip nat pool ovrld 218.5.67.132 218.5.67.132 prefix-length 28
ip nat inside source list 101 pool ovrld overload
ip nat inside source static tcp 192.168.232.30 80 218.5.67.130 80 extendable
ip nat inside source static tcp 192.168.232.30 81 218.5.67.130 81 extendable
ip nat inside source static tcp 192.168.232.30 21 218.5.67.130 21 extendable
ip nat inside source static 192.168.232.30 218.5.67.130

ip classless
ip route 0.0.0.0 0.0.0.0 218.5.67.129
ip route 172.21.188.0 255.255.255.0 192.168.232.15
ip http server
!
access-list 50 permit 192.168.232.0 0.0.0.255
access-list 101 deny tcp any any range 6881 6890
access-list 101 permit ip 192.168.232.0 0.0.0.255 any
access-list 101 permit ip 172.21.188.0 0.0.0.255 any
access-list 131 permit icmp any echo-reply
access-list 131 permit icmp any host 218.5.67.130 echo-reply
access-list 131 permit tcp any any established
access-list 131 permit ip any any
access-list 131 permit tcp any host 218.5.67.130 eq www
access-list 131 permit tcp any host 218.5.67.130 eq 81
access-list 131 permit tcp any host 218.5.67.130 eq ftp
!
line con 0

login local
line aux 0
line vty 0 4

access-class 50 in

privilege level 15

login local

transport input telnet
line vty 5 15

access-class 23 in

privilege level 15

login local

transport input telnet
!
!
!
end