>>>Все правильно кроме:
>>>
>>>crypto map vpn 100 ipsec-isakmp
>>> set peer 195.162._____
>>> set transform-set vpn
>>> match address 101
>>>
>>>interface Dialer1
>>> ip address 87.103.________ 255.255.255.0
>>> ip mtu 1492
>>> ip nat outside
>>> ip virtual-reassembly
>>> encapsulation ppp
>>> dialer pool 1
>>> ppp authentication pap callin
>>> ppp pap sent-username ________ e password 0 __________
>>> crypto map depfin
>>>
>>>^^^^^^^
>>>//ЧТО ЗА КРИПТОМАП ТАКОЙ??? В ТВОЕМ КОНФИГЕ ОН НЕ ОПИСАН!
>>>
>>>У тебя есть crypto map vpn вот его и подставляй
>>
>>я извеняюсь там стоит не crypto map depfin а crypto map vpn
>>эт я не правильно конфу скинул
>>и все равно не работает
>покажите актуальные конфиги, относящиеся к тунелям и дебаги
>debug crypto isakmp
>debug crypto ipsec Итак конфиг 1-й циски
Building configuration...
vpdn-group pppoe
request-dialin
protocol pppoe
!
no ftp-server write-enable
!
!
!
!
!
crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key 111 address 87.103.х.х
!
!
crypto ipsec transform-set vpn esp-3des esp-sha-hmac
!
crypto map vpn 100 ipsec-isakmp
set peer 87.103.x.x
set transform-set vpn
match address 101
!
!
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
hold-queue 224 in
!
interface ATM0.1 point-to-point
pvc 0/35
pppoe-client dial-pool-number 1
!
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 172.16.19._ 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
interface Dialer1
ip address 87.103.y.y 255.255.255.0
ip mtu 1492
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
ppp authentication pap callin
ppp pap sent-username ___password __
crypto map vpn
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
ip nat translation max-entries 10
ip nat inside source list 100 interface Dialer1 overload
!
access-list 100 deny ip 172.16.19.0 0.0.0.255 172.16.29.0 0.0.0.255
access-list 100 permit ip 172.16.19.0 0.0.0.255 any
access-list 101 permit ip 172.16.19.0 0.0.0.255 172.16.29.0 0.0.0.255
no cdp run
!
КОНФА ВТОРОЙ ЦИСКИ
!
vpdn-group pppoe
request-dialin
protocol pppoe
!
no ftp-server write-enable
!
crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key 111 address 87.103.y.y
!
!
crypto ipsec transform-set vpn esp-3des esp-sha-hmac
!
crypto map vpn 100 ipsec-isakmp
set peer 87.103.y.y
set transform-set vpn
match address 101
!
!
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
hold-queue 224 in
!
interface ATM0.1 point-to-point
pvc 0/35
pppoe-client dial-pool-number 1
!
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 172.16.29.2 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
interface Dialer1
ip address negotiated
ip mtu 1492
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
ppp authentication pap callin
ppp pap sent-username _______ password ________
crypto map vpn
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
ip nat inside source list 100 interface Dialer1 overload
!
access-list 100 deny ip 172.16.29.0 0.0.0.255 172.16.19.0 0.0.0.255
access-list 100 permit ip 172.16.29.0 0.0.0.255 any
access-list 101 permit ip 172.16.29.0 0.0.0.255 172.16.19.0 0.0.0.255
no cdp run
!
control-plane
!
!