Добрый день всем!
Прошу помощи у знающих людей, не могу закончить настройку ipsec между centos(ipsec-tools)это клиент и cisco(на другой стороне), судя по логам первая фаза проходит, не получается дальше:
лог cisco:
Тем не менее 1-ю фазу мы проходим, сие означает что с прешарой всё в порядке...
Jul 26 11:53:09 192.168.28.238 :Jul 26 11:53:09 MSK/MDD: %ASA-vpn-5-713119: Group = 94.199.77.100, IP = 94.199.77.100, PHASE 1 COMPLETED
Jul 26 11:53:09 192.168.28.238 :Jul 26 11:53:09 MSK/MDD: %ASA-vpn-7-713121: IP = 94.199.77.100, Keep-alive type for this connection: DPD
Jul 26 11:53:09 192.168.28.238 :Jul 26 11:53:09 MSK/MDD: %ASA-vpn-7-715080: Group = 94.199.77.100, IP = 94.199.77.100, Starting P1 rekey timer: 21600 seconds.

А вот на 2-ой фазе пока проблемы...
Jul 26 11:53:10 192.168.28.238 :Jul 26 11:53:10 MSK/MDD: %ASA-vpn-7-713222: Group = 94.199.77.100, IP = 94.199.77.100, Static Crypto Map check, map = outside_map, seq = 2018, ACL does not match proxy IDs src:0.0.0.0 dst:0.0.0.0

должно быть proxy IDs src:172.18.16.193 dst:192.168.145.8

Вот что у меня в логах на centos:

Jul 26 11:54:28 billing racoon: INFO: IPsec-SA request for 194.54.100.200 queued due to no phase1 found.                                                    
Jul 26 11:54:28 billing racoon: INFO: initiate new phase 1 negotiation: 94.199.77.100[500]<=>194.54.100.200[500]                                            
Jul 26 11:54:28 billing racoon: INFO: begin Aggressive mode.                                                                                                
Jul 26 11:54:28 billing racoon: INFO: received Vendor ID: CISCO-UNITY                                                                                        
Jul 26 11:54:28 billing racoon: INFO: received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt                                                              
Jul 26 11:54:28 billing racoon: INFO: received Vendor ID: DPD                                                                                                
Jul 26 11:54:28 billing racoon: INFO: received broken Microsoft ID: FRAGMENTATION
                                                                            
Jul 26 11:54:28 billing racoon: NOTIFY: couldn't find the proper pskey, try to get one by the peer's address.
                                                
Jul 26 11:54:28 billing racoon: INFO: ISAKMP-SA established 94.199.77.100[500]-194.54.100.200[500] spi:c49c4e0068b0cba7:4a8c58942f7a49b7                    
Jul 26 11:54:29 billing racoon: INFO: initiate new phase 2 negotiation: 94.199.77.100[500]<=>194.54.100.200[500]                                            
Jul 26 11:54:29 billing racoon: ERROR: unknown notify message, no phase2 handle found.                                                                      
Jul 26 11:54:29 billing racoon: INFO: purging ISAKMP-SA spi=c49c4e0068b0cba7:4a8c58942f7a49b7.                                                              
Jul 26 11:54:29 billing racoon: INFO: purged ISAKMP-SA spi=c49c4e0068b0cba7:4a8c58942f7a49b7.

Как видно из логов есть адрес моего сервера 94.199.77.100 и адрес cisco 194.54.100.200
далее есть адреса со стороны cisco:
src:172.18.16.193 dst:192.168.145.8, с ними я не понимаю что делать, как их указать в racoon.conf
ОЧень нужна помощь, буду благодарен всем!
Спасибо.