Interconnecter un MLS à un routeur passant par un firewall ASA

Bonjour les amis, j’espère que vous allez bien.

J'ai essayé de configurer la topologie suivante:



J'ai crée 2 VLANs au niveau du MLS ( Multi Layes Switch) et 2 sous interfaces au niveau de l'interface g0/1 de l'ASA.

Le problème c'est que je n'arrive pas à pinguer depuis le MLS vers l'OUTSIDE.

La configuration de l'ASA








La configuration du MLS :
ESW1#sh running-config
Building configuration...
Current configuration : 2274 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
no service dhcp
!
hostname ESW1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
no ip icmp rate-limit unreachable
!
!
ip cef
no ip domain lookup
!
--More--

• Mar 1 00:00:41.383: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan10, ch anged state to up
• Mar 1 00:00:41.391: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan11, ch anged state to up

!
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
vtp file nvram:vlan.dat
ip tcp synwait-time 5
interface FastEthernet0/0
description *** Unused for Layer2 EtherSwitch ***
switchport trunk allowed vlan 1,2,10,11,1002-1005
switchport mode trunk
!
interface FastEthernet0/1
description *** Unused for Layer2 EtherSwitch ***
shutdown
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address 10.1.1.2 255.255.255.252
!
interface Vlan11
ip address 10.1.1.18 255.255.255.252
!
no ip http server
no ip http secure-server
!
ip forward-protocol nd
ip route 10.1.1.0 255.255.255.252 10.1.1.1
ip route 10.1.1.0 255.255.255.252 FastEthernet0/0 10.1.1.1
!
!
no cdp log mismatch duplex
!
!
!
control-plane
!
!
!
!
mgcp behavior g729-variants static-pt
!
!
!
!
!
banner exec ^C


*

This is a normal Router with a SW module inside (NM-16ESW)
It has been preconfigured with hard coded speed and duplex

To create vlans use the command "vlan database" from exec mode
After creating all desired vlans use "exit" to apply the config

To view existing vlans use the command "show vlan-switch brief"

Warning: You are using an old IOS image for this router.
Please update the IOS to enable the "macro" command!


*

^C
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
end