конфиг: !
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
enable password qwerty
!
no aaa new-model
!
resource policy
!
ip cef
!
!
!
!
!
!
!
!
!
controller DSL 0
mode atm
line-term cpe
line-mode 2-wire line-zero
dsl-mode shdsl symmetric annex A
line-rate auto
!
!
crypto isakmp policy 10
hash md5
authentication pre-share
group 2
!
crypto isakmp policy 11
authentication pre-share
group 2
crypto isakmp key xxxxxxxxxx address 100.100.100.100
!
!
crypto ipsec transform-set sharks esp-des esp-md5-hmac
!
crypto map eee 1 ipsec-isakmp
set peer 100.100.100.100
set security-association lifetime seconds 86400
set transform-set sharks
match address 120
!
!
!
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
!
interface ATM0
no ip address
no ip route-cache cef
no ip route-cache
no atm ilmi-keepalive
!
interface ATM0.1 point-to-point
no ip route-cache
no snmp trap link-status
pvc 8/35
encapsulation aal5snap
pppoe-client dial-pool-number 1
!
crypto map eee
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
ip address 10.10.100.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
interface Dialer1
mtu 1452
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname xxxxxxxxx
ppp chap password 0 xxxxxxxxx
ppp pap sent-username xxxxxxxxx password 0 xxxxxxxxx
crypto map eee
!
ip route 0.0.0.0 0.0.0.0 Dialer1
!
!
ip http server
no ip http secure-server
ip nat inside source list nat_acl interface Dialer0 overload
!
ip access-list extended nat_acl
deny ip 10.10.100.0 0.0.0.255 192.168.1.0 0.0.0.255
permit ip any any
!
access-list 120 permit ip 10.10.100.0 0.0.0.255 192.168.1.0 0.0.0.255 log
dialer-list 1 protocol ip permit
!
!
!
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
password qwerty
login
!
scheduler max-task-time 5000
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
end
R1#sh ip int brief
Interface IP-Address OK? Method Status Prot
ocol
FastEthernet0 unassigned YES unset up down
FastEthernet1 unassigned YES unset up up
FastEthernet2 unassigned YES unset up down
FastEthernet3 unassigned YES unset up down
BRI0 unassigned YES NVRAM administratively down down
BRI0:1 unassigned YES unset administratively down down
BRI0:2 unassigned YES unset administratively down down
Vlan1 10.10.100.1 YES NVRAM up up
ATM0 unassigned YES NVRAM down down
ATM0.1 unassigned YES unset down down
NVI0 unassigned NO unset up up
Dialer1 unassigned YES manual up up
бьюсь с подкючением к провайдеру целую неделю, ни в какую не хочет подниматься ATM интерфейс, была другая железка (cisco 828), на ней все нормально работало, а на этой даже лампочки SHDSL'ные не горят.