схема
[cisco881] {10.94.3.1}
fa0 - dlink DES-1018DG - server {10.94.3.2}
fa1 - cisco spa 8800 {10.94.3.13}

конфиги, тесты, настройки

interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 10.94.3.1 255.255.255.0
ip flow ingress
ip nat inside
no ip virtual-reassembly in
ip tcp adjust-mss 1452

nsb-gtw#sh arp
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
..
Internet  10.94.3.13             18   b862.1f88.445c  ARPA   Vlan1
..
nsb-g#ping 10.94.3.13
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.94.3.13, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
nsb-g#sh mac-address
Destination Address  Address Type  VLAN  Destination Port
-------------------  ------------  ----  --------------------
0015.652e.74d4          Dynamic       1     FastEthernet0
0015.652e.83e2          Dynamic       1     FastEthernet0
001a.4ddd.b484          Dynamic       1     FastEthernet0
0090.271d.769d          Dynamic       1     FastEthernet0
3085.a946.52bf          Dynamic       1     FastEthernet0
a8f9.4b03.a368          Dynamic       1     FastEthernet2
acf2.c503.bef8          Self          1     Vlan1
b862.1f88.445c          Dynamic       1     FastEthernet1
bc30.5bd6.2ae7          Dynamic       1     FastEthernet0
e811.3272.d2fd          Dynamic       1     FastEthernet0
e839.358f.ed9e          Dynamic       1     FastEthernet0

nsb-g#
FastEthernet1 is up, line protocol is up
  Hardware is Fast Ethernet, address is acf2.c503.bef9 (bia acf2.c503.bef9)
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full-duplex, 100Mb/s
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:01:18, output never, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 1000 bits/sec, 2 packets/sec
     32313 packets input, 13229151 bytes, 0 no buffer
     Received 31 broadcasts (393 multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 0 multicast, 0 pause input
     0 input packets with dribble condition detected
     179453 packets output, 23210024 bytes, 0 underruns
     0 output errors, 0 collisions, 2 interface resets
     393 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped

C:\Users\Администратор>ipconfig
Настройка протокола IP для Windows
Ethernet adapter Подключение по локальной сети:
   DNS-суффикс подключения . . . . . :
   IPv4-адрес. . . . . . . . . . . . : 10.94.3.2
   Маска подсети . . . . . . . . . . : 255.255.255.0
   Основной шлюз. . . . . . . . . : 10.94.3.1

C:\Users\Администратор>ping 10.94.3.13

Обмен пакетами с 10.94.3.13 по с 32 байтами данных:
Ответ от 10.94.3.13: число байт=32 время<1мс TTL=250
Ответ от 10.94.3.13: число байт=32 время<1мс TTL=250
Ответ от 10.94.3.13: число байт=32 время<1мс TTL=250
Ответ от 10.94.3.13: число байт=32 время<1мс TTL=250
Статистика Ping для 10.94.3.13:
    Пакетов: отправлено = 4, получено = 4, потеряно = 0
    (0% потерь)
Приблизительное время приема-передачи в мс:
    Минимальное = 0мсек, Максимальное = 0 мсек, Среднее = 0 мсек
C:\Users\Администратор>

Product Name:     SPA8800 Serial Number:     CBT15450004  
Software Version:     6.1.7(GW) Hardware Version:     1.3.0  
MAC Address:     B8621F88444C Client Certificate:     Installed  
Customization:     Open  
  
  System Status  
Current Time:     8/2/2013 10:21:15 Elapsed Time:     19:33:19  
Wan Connection Type:     Static IP Current IP:     10.94.3.13  
Host Name:     8800_N01 Domain:      
Current Netmask:     255.255.255.0 Current Gateway:     10.94.3.1  
Primary DNS:     10.94.3.1  
Secondary DNS:      
LAN IP Address:     192.168.0.1 Broadcast Pkts Sent:     15  
Broadcast Bytes Sent:     5139 Broadcast Pkts Recv:     65479  
Broadcast Bytes Recv:     5997860 Broadcast Pkts Dropped:     0  

>Проблема 1:
>Телефоны берут DHCP с cisco, потом мы перезагружаем устройство такое-то в результате не работает это.

верно, перегружаем SPA8800 и cisco881 перестает его пинговать

конфиг 881

nsb-g#sh run
Building configuration...

Current configuration : 5353 bytes
!
! Last configuration change at 06:18:06 UTC Fri Aug 2 2013 by ad
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname nsb-g
!
boot-start-marker
boot system flash:/c880data-universalk9-mz.152-4.M1.bin
boot-end-marker
!
!
logging buffered 51200 warnings
!
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local
!
!
!
!
!
aaa session-id common
memory-size iomem 10
!
crypto pki trustpoint TP-8
!
!
crypto pki certificate chain TP-s8
        quit
!
!
ip dhcp pool ccp-pool1
network 10.94.3.0 255.255.255.0
default-router 10.94.3.1
dns-server 10.94.3.1
!
!
!
ip domain name gent.ru
ip name-server 8.8.8.8
ip cef
no ipv6 cef
!
!
license udi pid CISCO881-K9 sn b
!
!
archive
log config
  logging enable
  hidekeys
path ftp://h:h@9.9.9.9/Public/tftp/router-cfg/nsb-g/config
write-memory
time-period 10800
username ad privilege 15 8
!
!
!
!
!
!
!
crypto isakmp policy 6
encr 3des
hash md5
authentication pre-share
lifetime 600
crypto isakmp keepalive 10 5
!
!
crypto ipsec transform-set TS esp-3des esp-md5-hmac
!
crypto ipsec profile 6
set transform-set TS
!
!
!
!
!
!
interface Tunnel0
description Office
ip address 4.4.4.1 255.255.255.252
ip mtu 1430
tunnel source FastEthernet4
tunnel destination 3.3.3.1
!
interface Tunnel1
description Sklad
ip address 4.4.4.5 255.255.255.252
ip mtu 1430
tunnel source FastEthernet4
tunnel destination 3.3.4.2
!
interface FastEthernet0
no ip address
spanning-tree portfast
!
interface FastEthernet1
no ip address
spanning-tree portfast
!
interface FastEthernet2
no ip address
spanning-tree portfast
!
interface FastEthernet3
no ip address
spanning-tree portfast
!
interface FastEthernet4
ip address 7.7.7.6 255.255.255.248
ip flow ingress
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 10.94.3.1 255.255.255.0
ip flow ingress
ip nat inside
no ip virtual-reassembly in
ip tcp adjust-mss 1452
!
ip forward-protocol nd
no ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip dns server
ip nat inside source list 2 interface FastEthernet4 overload
ip nat inside source static tcp 10.94.3.3 80 7.7.7.7 80 extendable
ip route 0.0.0.0 0.0.0.0 7.7.7.1
ip route 2.2.0.0 255.255.0.0 4.4.4.2
ip route 2.3.0.0 255.255.0.0 4.4.4.6
!
logging trap debugging
logging facility local6
logging host 10.94.3.2
access-list 2 permit 10.94.3.0 0.0.0.255
access-list 23 permit 5.5.5.5
no cdp run
!
snmp-server community public RO 1
!
!
!
!
line con 0
line aux 0
line vty 0 4
access-class 23 in
privilege level 15
transport input ssh
!
!
end

nsb-g#