Probléme de connexion via ASA et vlan

Bonjour tout le monde ,

j'ai un problème un peu compliqué dont j'essaie depuis un mois de résoudre mais en vain

voila j'ai un switch hp4104 sur lequel j'ai configuré un vlan test et j'ai un ASA5510 sur

lequel j'ai configuré l'interface du vlan test en un sous réseau pour pouvoir ségmenter

mon réseau d'entreprise.j'ai tout essayé mais j'arrive pas à sortir sur le net à travers le

vlan test .je sais pas si c'est un problème nat j'ai pourtant bien configuré le nat ou d'acl

.voici a configuration de mon ASA (il y a des choses que j'ai caché pour des raisons de

confidentialité:

ASA Version 8.2(1)
!
hostname ASA1
domain-name XXXXXXX
enable password XXXXXX encrypted
passwd XXXX encrypted
names
XXX
dns-guard
!
interface Ethernet0/0
nameif outside
security-level 0
ip address Routeur1-inside 255.255.255.0
ospf cost 10
!
interface Ethernet0/1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
ospf cost 10
!
interface Ethernet0/1.1
vlan 2
nameif test
security-level 50
ip address 192.168.2.1 255.255.255.0
ospf cost 10
!

interface Ethernet0/2
shutdown
no nameif
security-level 0
no ip address
!
interface Ethernet0/3
shutdown
no nameif
no security-level
no ip address
!
interface Management0/0
shutdown
no nameif
no security-level
no ip address
!
boot system disk0:/asa821-k8.bin
ftp mode passive
clock timezone WET 0
dns domain-lookup outside
dns domain-lookup inside
dns server-group DefaultDNS
domain-name XXXX
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
object-group network XXXXX

object-group service WEB
service-object tcp eq www
service-object tcp eq https
service-object udp eq domain
object-group service DM_INLINE_SERVICE_1
service-object tcp eq ftp
service-object tcp eq ftp-data
group-object WEB
object-group service DM_INLINE_SERVICE_2
group-object WEB
service-object tcp eq ftp
service-object tcp eq ftp-data
object-group service DM_INLINE_SERVICE_3
group-object WEB
service-object tcp eq ftp
service-object tcp eq ftp-data
object-group service srce-mail
service-object tcp-udp eq domain
service-object tcp eq https
service-object tcp eq imap4
service-object tcp eq pop3
service-object tcp eq smtp
service-object tcp eq 3389
object-group service pop-imap
service-object tcp eq 993
service-object tcp eq 995
service-object tcp eq imap4
service-object tcp eq pop3
object-group protocol TCPUDP
protocol-object udp
protocol-object tcp
object-group network network-test
network-object network-test 255.255.255.0
network-object host 192.168.2.3 255.255.255.0
object-group service DM_INLINE_SERVICE_4
service-object tcp eq 9105
service-object udp eq 9105
access-list outside_access extended permit icmp any any inactive
access-list outside_access extended permit tcp any host Routeur1-inside eq www
access-list outside_access extended permit tcp any host Routeur1-inside eq smtp
access-list outside_access extended permit object-group TCPUDP any host Routeur1-inside eq domain
access-list outside_access extended permit tcp any host Routeur1-inside eq https
access-list outside_access extended permit tcp any host Routeur1-inside eq pop3
access-list outside_access extended permit tcp any host Routeur1-inside eq imap4
access-list outside_access extended permit tcp any host Routeur1-inside eq 5555
access-list inside_access extended permit icmp any any
access-list inside_access extended permit ip object-group VIP any
access-list inside_access extended permit object-group srce-mail host SRV-MAIL-PRIV any
access-list inside_access extended permit object-group srce-mail any host SRV-MAIL-PRIV
access-list inside_access extended permit object-group srce-mail any host Routeur1-inside

access-list inside_access extended permit object-group TCPUDP any host SRV-WEB-PRIV eq www
access-list inside_access extended permit ip host SRV-WEB-PRIV any
access-list inside_access extended permit object-group TCPUDP host SRV-DNS any eq domain
access-list inside_access extended permit ip host HOUDA host VOIP
access-list inside_access extended permit object-group DM_INLINE_SERVICE_4 host ABDELHAQ any
access-list inside_access extended permit object-group WEB host network-test any
access-list inside_nat0_outbound extended permit ip any 192.168.1.224 255.255.255.240
access-list inside_nat0_outbound extended permit ip any any
access-list test_access_in extended permit ip any any
access-list test_access_in extended permit ip host SRV-WEB-PRIV any
access-list test_access_in extended permit object-group TCPUDP any host SRV-WEB-PRIV eq www
access-list test_access_in extended permit object-group TCPUDP host SRV-DNS any eq domain
access-list test_access_in extended permit object-group WEB host network-test any
access-list test_nat0_outbound extended permit ip any any
pager lines 24
logging enable
logging monitor emergencies
logging asdm warnings
mtu outside 1500
mtu inside 1500
mtu test 1500
ip local pool VPN-Pool QARAF-192.168.1.240 mask 255.255.255.0
icmp unreachable rate-limit 1 burst-size 1
asdm history enable
arp timeout 14400
nat-control
global (outside) 1 interface
global (test) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
nat (test) 1 0.0.0.0 0.0.0.0
static (inside,outside) tcp interface smtp SRV-MAIL-PRIV smtp netmask 255.255.255.255 tcp 30 0 norandomseq
static (inside,outside) tcp interface https SRV-MAIL-PRIV https netmask 255.255.255.255 tcp 20 0 norandomseq
static (inside,outside) tcp interface domain SRV-MAIL-PRIV domain netmask 255.255.255.255 tcp 20 0 norandomseq
static (inside,outside) udp interface domain SRV-MAIL-PRIV domain netmask 255.255.255.255 tcp 20 0 norandomseq
static (inside,outside) tcp interface imap4 SRV-MAIL-PRIV imap4 netmask 255.255.255.255
static (inside,outside) tcp interface pop3 SRV-MAIL-PRIV pop3 netmask 255.255.255.255
static (inside,outside) tcp interface www SRV-WEB-PRIV www netmask 255.255.255.255 tcp 20 0 norandomseq
access-group outside_access in interface outside
access-group inside_access in interface inside
access-group test_access_in in interface test
route outside 0.0.0.0 0.0.0.0 172.20.1.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 192.168.1.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set pfs group5
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set transform-set ESP-DES-SHA ESP-DES-MD5
crypto map outside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map outside_map interface outside
crypto map inside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map inside_map interface inside
crypto ca server
shutdown
crypto isakmp enable outside
crypto isakmp enable inside
crypto isakmp policy 10
authentication pre-share
encryption des
hash sha
group 2
lifetime 86400
crypto isakmp policy 30
authentication pre-share
encryption des
hash sha
group 5
lifetime 86400
crypto isakmp ipsec-over-tcp port 10000
no vpn-addr-assign aaa
no vpn-addr-assign dhcp
telnet 192.168.1.0 255.255.255.0 inside
telnet timeout 5
ssh scopy enable
ssh 192.168.1.0 255.255.255.0 inside
ssh timeout 5
console timeout 0
threat-detection basic-threat
threat-detection statistics port
threat-detection statistics protocol
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
ntp authenticate
ntp server SRV-DNS source inside
webvpn
group-policy VPN internal
group-policy VPN attributes
dns-server value 192.168.1.122
vpn-tunnel-protocol IPSec
default-domain value logisoft.ma
username admin password 7RVi4mTe0gQJ1ToR encrypted privilege 15
username adil password jLCjyJkKWdtQ/AfNR4b3yg== nt-encrypted
username adil attributes
service-type remote-access
tunnel-group DefaultRAGroup ppp-attributes
authentication ms-chap-v2
tunnel-group VPN type remote-access
tunnel-group VPN general-attributes
address-pool VPN-Pool
default-group-policy VPN
tunnel-group VPN ipsec-attributes
pre-shared-key *
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
!
service-policy global_policy global
prompt hostname context
Cryptochecksum:189d7ec5f663d2ac114ac54fc7ddc9ba
: end


si quelqu'un peut m'aider je serai trés reconnaissant ,j'ai vraiment besoin d'une solution cette semaine .
merci d'avance.