Добрый всем вечер ! Cisco ASA никогда в жизни не видел, первый опыт.
Есть : 2 внутренних сети и выход в нет. Из одной внутренний подсети хожу в инет, с консоли пингую все 3 подсоединенные сети, но inside -- inside2 сети друг друга не видят. Натолкните на мысль, что у меня не так

Интерфейсы:

Outside: 94.72.3.242 255.255.255.248
Inside: 10.100.1.254 255.255.0.0
Inside2: 192.168.8.253 255.255.255.0

конфа:

hostname gsk
!
domain name firstgsk.ru
!
interface eth0/0
nameif outside
security-level 0
ip address 94.72.3.242 255.255.255.248
no shut
!
int eth0/1
nameif inside
security-level 100
ip address 10.100.1.254 255.255.0.0
no shut
!
!
int eth0/2
nameif inside2
security-level 100
ip address 192.168.8.253 255.255.255.0
no shut
!

same-security-traffic permit inter-interface

route outside 0.0.0.0 0.0.0.0 94.72.3.241 1
nat (inside) 1 10.100.0.0 255.255.0.0
nat (inside2) 1 192.168.8.0 255.255.255.0

global (outside) 1 interface

static (inside,inside2) 10.100.0.0 10.100.0.0 netmask 255.255.255.0
static (inside2,inside) 192.168.8.0 192.168.8.0 netmask 255.255.255.0

static (inside,outside) tcp interface smtp 10.100.1.3 smtp netmask 255.255.255.255
static (inside,outside) tcp interface https 10.100.1.3 https netmask 255.255.255.255

access-list 101 extended permit icmp any any echo-reply
access-list 101 extended permit icmp any any source-quench
access-list 101 extended permit icmp any any time-exceeded
access-list 101 extended permit icmp any any unreachable
access-list 101 extended permit tcp any interface outside eq https
access-list 101 extended permit tcp any interface outside eq smtp
access-list 102 extended permit icmp any any echo-reply
access-list 102 extended permit icmp any any source-quench
access-list 102 extended permit icmp any any unreachable
access-list 102 extended permit icmp any any time-exceeded
access-list 103 extended permit icmp any any echo-reply
access-list 103 extended permit icmp any any source-quench
access-list 103 extended permit icmp any any unreachable
access-list 103 extended permit icmp any any time-exceeded

access-group 101 in interface outside

route inside2 192.168.1.0 255.255.255.0 192.168.8.250 1
route inside2 192.168.2.0 255.255.255.0 192.168.8.250 1
route inside2 192.168.3.0 255.255.255.0 192.168.8.250 1
route inside2 192.168.4.0 255.255.255.0 192.168.8.250 1
route inside2 192.168.5.0 255.255.255.0 192.168.8.250 1
route inside2 192.168.17.0 255.255.255.0 192.168.8.250 1
route inside2 192.168.20.0 255.255.255.0 192.168.8.250 1
route inside2 192.168.33.0 255.255.255.0 192.168.8.250 1
route inside2 192.168.102.0 255.255.255.0 192.168.8.250 1