Поменяли zyxel660r2 на cisco877k9 (advsec). На зухеле были прописаны постоянные маршруты. 877, как мне кажется, настроил

Код:version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service sequence-numbers
!
hostname cisco
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
no aaa new-model
clock timezone EET 2
clock summer-time EET recurring last Sun Mar 3:00 last Sun Oct 4:00
!
crypto pki trustpoint TP-self-signed-234362756
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-234362756
revocation-check none
rsakeypair TP-self-signed-234362756
!
!
crypto pki certificate chain TP-self-signed-234362756
certificate self-signed 01
  3082024D 308201B6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030  
  30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274  
  69666963 6174652D 32333433 36323735 36301E17 0D313130 31303631 30353531  
  395A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F  
  532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3233 34333632  
  37353630 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100  
  C371FC02 A04E78FA 93E9B4E2 27BFD95D 167D3CBB 31621C4A 0F1B7D1C CDBF8A65  
  B3098481 88C6831C C78646F1 1C953768 7214EEE6 EFB39A51 061DCEF7 A1767733  
  E38E3317 BB4C6FD2 8BA5C7B0 3A414A3A 307260EB BB988B6B 2C094DB0 244FB00E  
  97E5A847 881B9C2A 2AC4F309 0A129535 908A9C14 D937F24F 69D11F16 9527278B  
  02030100 01A37730 75300F06 03551D13 0101FF04 05300301 01FF3022 0603551D  
  11041B30 19821779 6F75726E 616D652E 796F7572 646F6D61 696E2E63 6F6D301F  
  0603551D 23041830 16801483 35E9B40D 212CF2FF 67F075B1 668DA561 B22F3C30  
  1D060355 1D0E0416 04148335 E9B40D21 2CF2FF67 F075B166 8DA561B2 2F3C300D  
  06092A86 4886F70D 01010405 00038181 002EF88A 3EB8E24F 692C1F8E 158DCB00  
  C0496ACD 3706DB01 4BF360E3 4E8C224B 64680E89 C629D719 68F7418E 8A623B63  
  239A9935 0B05522B DE44888B EE97CF6F 9ECDB469 6FA00E5F 5F73D175 F484F410  
  9BC7DB2D BCF36675 4B696486 DB06A546 AABE7AB9 CADA5529 DF4EF7FB FDC8919E  
  3FDEAF6F 6AF7C03B 98058596 52C164C6 A9
      quit
dot11 syslog
ip cef
!
!
no ip domain lookup
ip domain name yourdomain.com
!
vpdn enable
!
vpdn-group 1
! Default PPTP VPDN group
accept-dialin
  protocol pptp
  virtual-template 1
!
!
!
username cisco privilege 15 secret 5 $1$9/qv$g.W0Q6NrTEIXugvsJhxe11
!  
!
archive
log config
  hidekeys
!
!
!
bridge irb
!
!
interface ATM0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
no atm ilmi-keepalive
dsl operating-mode auto  
!
interface ATM0.1 point-to-point
pvc 0/33  
  encapsulation aal5snap
  pppoe max-sessions 2
  pppoe-client dial-pool-number 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Virtual-Template1  
ip unnumbered Vlan1
ip nat inside
ip virtual-reassembly
peer default ip address pool VPNPOOL
no keepalive
ppp encrypt mppe auto required
ppp authentication ms-chap ms-chap-v2 chap
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 192.168.1.221 255.255.255.0
ip access-group 101 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1452
!
interface Dialer0
mtu 1492
ip address negotiated
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1452
ip nat outside
ip nat enable
ip virtual-reassembly
encapsulation ppp
ip route-cache flow
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname ****
ppp chap password 7 ****
ppp pap sent-username **** password 7 ****
ppp ipcp dns request
!
ip local pool VPNPOOL 192.168.1.251 192.168.1.253
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
ip route 192.168.2.0 255.255.255.0 192.168.1.1
ip route 192.168.3.0 255.255.255.0 192.168.1.1
ip route 192.168.4.0 255.255.255.0 192.168.1.1
!
no ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 101 permit ip any any
dialer-list 1 protocol ip permit
no cdp run
!
!
!
control-plane
!
bridge 1 protocol ieee
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
exec-timeout 30 0
privilege level 15
logging synchronous
login local
transport input ssh
transport output ssh
!
scheduler max-task-time 5000
ntp clock-period 17183731
ntp server 86.57.151.3 key 0 prefer
end

Интернет появился, однако, не работают удалённые банковские терминалы, указанные в маршрутах, и банк-клиент (TCP :9781) из локалки... В чём моя ошибка (не судите строго - это моя первая cisco). Схема сети простая: ADSL(PPPoE)->CISCO->HUB->LAN + в HUB подключен zyxel660r2, с помощью которого, через VPN прова, подключены удалённые банковские терминалы (192.168.1-4.0)