Добрый день Есть настройки: на базе 861 серии. Почему то не поднимается туннель =(
R1 (Главный)
policy-map FOO
class class-default
    shape average 128000
!
!
!
crypto isakmp policy 1
hash md5
authentication pre-share
group 2
crypto isakmp key globex address 10.108.0.200
crypto isakmp key globex address 10.77.0.200
crypto isakmp keepalive 20 5
!
!
crypto ipsec transform-set TS esp-des esp-sha-hmac
!
crypto ipsec profile VTI
set transform-set TS
!
!
!
!
!
!
interface Tunnel10
description "gre tunnel to r2"
ip address 10.1.1.1 255.255.255.252
ip mtu 1380
keepalive 10 3
tunnel source FastEthernet4
tunnel destination 10.108.0.200
tunnel path-mtu-discovery
!
interface Tunnel20
description "gre tunnel to r3"
ip address 10.0.2.1 255.255.255.0
keepalive 10 3
tunnel source FastEthernet4
tunnel mode ipsec ipv4
tunnel destination 10.77.0.200
tunnel protection ipsec profile VTI
service-policy output FOO
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
description "internet access for r1"
ip address 10.31.1.50 255.255.255.192
ip virtual-reassembly
duplex auto
speed auto
!
interface Vlan1
description "local network r1"
ip address 192.168.0.100 255.255.255.0
ip virtual-reassembly
!
router rip
version 2
network 10.0.0.0
network 192.168.0.0
!
ip forward-protocol nd
ip http server
no ip http secure-server
!
ip dns server
ip route 0.0.0.0 0.0.0.0 FastEthernet4

и соответственно R2 (второстепенный)таких будет два
policy-map FOO
class class-default
    shape average 128000
!
!
!
crypto isakmp policy 1
hash md5
authentication pre-share
group 2
crypto isakmp key globex address 10.31.1.50
crypto isakmp keepalive 10
!
!
crypto ipsec transform-set TS esp-des esp-sha-hmac
!
crypto ipsec profile TVI
set transform-set TS
!
!
!
!
!
!
interface Tunnel20
description "gre tunnel to r1"
ip address 10.0.2.2 255.255.255.0
keepalive 10 3
tunnel source FastEthernet4
tunnel mode ipsec ipv4
tunnel destination 10.31.1.50
tunnel protection ipsec profile TVI
service-policy output FOO
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
description "internet access for r2"
ip address 10.77.0.200 255.255.255.224
ip virtual-reassembly
duplex auto
speed auto
!
interface Vlan1
description "local network r3"
ip address 192.168.2.100 255.255.255.0
ip virtual-reassembly
!
router rip
version 2
network 10.0.0.0
network 192.168.2.0
!
ip forward-protocol nd
ip http server
no ip http secure-server
!
ip dns server
ip route 0.0.0.0 0.0.0.0 FastEthernet4 10

• serial VTI на 3 CISCO,spiegel, 17:01 , 23-Янв-13
• serial VTI на 3 CISCO,Serb, 08:23 , 24-Янв-13

>[оверквотинг удален]
>  version 2
>  network 10.0.0.0
>  network 192.168.2.0
> !
> ip forward-protocol nd
> ip http server
> no ip http secure-server
> !
> ip dns server
> ip route 0.0.0.0 0.0.0.0 FastEthernet4 10

Покажите на обоих роутерах:

sh crypto isakmp pol
sh crypto isakmp sa
sh crypto ipsec trans
sh int tun20

>[оверквотинг удален]
>  version 2
>  network 10.0.0.0
>  network 192.168.2.0
> !
> ip forward-protocol nd
> ip http server
> no ip http secure-server
> !
> ip dns server
> ip route 0.0.0.0 0.0.0.0 FastEthernet4 10

вот это убрать
ip route 0.0.0.0 0.0.0.0 FastEthernet4

поставить нормальный маршрут,

пинг между FastEthernet4  проходит?