Имеется Cisco2600:aaa new-model
!
!
aaa authentication login userauthen local
aaa authorization network groupauthor local
aaa session-id common
!
crypto isakmp policy 3
encr 3des
authentication pre-share
group 2
!
crypto isakmp policy 10
hash md5
authentication pre-share
!
crypto isakmp client configuration group vpngroup
key cisco123
dns xx.xxx.192.155
pool ippool
!
!
crypto ipsec transform-set myset esp-3des esp-md5-hmac
!
crypto dynamic-map dynmap 10
set transform-set myset
!
!
crypto map clientmap client authentication list userauthen
crypto map clientmap isakmp authorization list groupauthor
crypto map clientmap client configuration address respond
crypto map clientmap 1 ipsec-isakmp
set peer xx.xxx.194.9
set transform-set myset
match address 100
crypto map clientmap 10 ipsec-isakmp dynamic dynmap
!
interface Ethernet0/0
ip address xx.xxx.194.23 255.255.255.224
no ip route-cache
half-duplex
no mop enabled
crypto map clientmap
!
ip local pool ippool xx.xxx.194.193 xx.xxx.194.196
ip classless
ip http server
no ip http secure-server
!
access-list 100 permit ip any any
при подключении к впну (На Винде):
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Cisco Systems VPN Adapter
Physical Address. . . . . . . . . : 00-05-9A-3C-78-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : xxx.xxx.194.195
Subnet Mask . . . . . . . . . . . : 255.0.0.0
Default Gateway . . . . . . . . . : xx.0.0.1
DNS Servers . . . . . . . . . . . : xx.xxx.192.155
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 xx.0.0.1 xx.xxx.194.193 1
xx.0.0.0 255.0.0.0 xx.xxx.194.193 xx.xxx.194.193 20
xx.xxx.194.0 255.255.255.224 xx.xxx.194.9 xx.xxx.194.9 20
как видим, после подключения выдается маска - 255.0.0.0
как задать маску для ИП получаемого при подключении??