Вот такой конфиг на циске 871. Клиент коннектится, получает ip 192.168.255.2, но не пингует ни 192.168.19.100 ни gw_addr

какого то роута не хватает? или я чего-то не понимаю?

aaa new-model
!
aaa authentication login userauthen local
aaa authorization network groupauthor local
!
ip cef
!
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
username user password pass
!
crypto isakmp policy 3
encr 3des
authentication pre-share
group 2
!
crypto isakmp client configuration group vpnclient
key 123
dns 192.168.19.100
wins 192.168.19.100
domain astana2.domen.kz
pool ippool
!
crypto ipsec transform-set myset esp-3des esp-md5-hmac
!
crypto dynamic-map dynmap 10
set transform-set myset
reverse-route
!
crypto map clientmap client authentication list userauthen
crypto map clientmap isakmp authorization list groupauthor
crypto map clientmap client configuration address respond
crypto map clientmap 10 ipsec-isakmp dynamic dynmap
!
interface Loopback0
ip address 10.11.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface FastEthernet4
ip address 213.157.a.b 255.255.255.0
ip nat outside
ip virtual-reassembly
ip policy route-map VPN-Client
duplex auto
speed auto
no cdp enable
crypto map clientmap
!
interface Vlan1
ip address 192.168.19.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
ip local pool ippool 192.168.255.1 192.168.255.2
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 gw_addr
ip nat inside source list 101 interface FastEthernet4 overload
access-list 101 permit ip any any
access-list 144 permit ip 192.168.255.0 0.0.0.255 any
!
route-map VPN-Client permit 10
match ip address 144
set interface Loopback0