Подключили второго провайдера к cisco 881. Само подключение проверяли на рабочих станциях, все работает, на cisco никак.
Вот рабочий конфиг циски.
#sh run
Building configuration...

Current configuration : 5088 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname cisco_vl
!
boot-start-marker
boot system flash c880data-universalk9-mz.124-24.T.bin
boot-end-marker
!
logging message-counter syslog
no logging buffered
!
no aaa new-model
memory-size iomem 10
clock timezone PCTime 3
clock summer-time PCTime date Mar 30 2003 2:00 Oct 26 2003 3:00
crypto pki token default removal timeout 0
!
!
no ip source-route
!
!
!
!
ip cef
no ipv6 cef
!
!
multilink bundle-name authenticated
password encryption aes
license boot module c880-data level advipservices
!
!
username ****** privilege 15 password 0 **********
!
!
crypto isakmp policy 1
  encr 3des
  authentication pre-share
  group 2
crypto isakmp key ********** address xxx.xxx.207.145
crypto isakmp key ********** address xxx.xxx.122.146
!
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec transform-set ESP-3DES-SHA1 esp-3des esp-sha-hmac
crypto ipsec fragmentation after-encryption
!
crypto map SDM_CMAP_1 1 ipsec-isakmp
  set peer xxx.xxx.207.145
  set transform-set ESP-3DES-SHA
  match address 100
!
crypto map SDM_CMAP_2 1 ipsec-isakmp
  set peer xxx.xxx.122.146
  set transform-set ESP-3DES-SHA1
  match address 101
!
archive
  log config
    hidekeys
!
!
!
!
!
interface Loopback0
  ip address 192.168.249.1 255.255.255.255
!
interface Tunnel0
  description MAIN
  bandwidth 8096
  ip address 192.168.100.42 255.255.255.252
  ip mtu 1418
  tunnel source FastEthernet4
  tunnel destination xxx.xxx.207.145
  crypto map SDM_CMAP_1
!
interface Tunnel1
  description BACKUP
  bandwidth 1024
  ip address 192.168.101.42 255.255.255.252
  ip mtu 1418
  tunnel source Vlan2
  tunnel destination xxx.xxx.122.146
  crypto map SDM_CMAP_2
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
  description VLAN2
  switchport access vlan 2
!
interface FastEthernet4
  ip address xxx.xxx.24.105 255.255.255.252
  duplex auto
  speed auto
  crypto map SDM_CMAP_1
!
interface Vlan1
  ip address 192.168.21.1 255.255.255.0
!
interface Vlan2
  ip address xxx.xxx.18.16 255.255.255.192
  ip virtual-reassembly
  crypto map SDM_CMAP_2
!
router eigrp 2
  passive-interface FastEthernet4
  passive-interface Tunnel0
  passive-interface Vlan1
  passive-interface Vlan2
  network 192.168.21.0
  network 192.168.101.0
  network 192.168.249.1 0.0.0.0
  distance eigrp 95 175
  no auto-summary
!
router eigrp 1
  passive-interface FastEthernet4
  passive-interface Tunnel1
  passive-interface Vlan1
  passive-interface Vlan2
  network 192.168.21.0
  network 192.168.100.0
  network 192.168.249.1 0.0.0.0
  no auto-summary
!
ip forward-protocol nd
ip route xxx.xxx.122.144 255.255.255.252 xxx.xxx.18.1
ip route 192.168.0.0 255.255.255.0 192.168.255.1
ip route xxx.xxx.207.144 255.255.255.252 xxx.xxx.24.106
ip http server
ip http authentication local
no ip http secure-server
!
!
!
access-list 100 permit gre host xxx.xxx.24.105 host xxx.xxx.207.145
access-list 101 permit gre host xxx.xxx.18.16 host xxx.xxx.122.146
!
!
!
!
!
control-plane
!
!
line con 0
  no modem enable
line aux 0
line vty 0 4
  privilege level 15
  login local
  transport input telnet ssh
!
scheduler max-task-time 5000
end
Новое подключение - это vlan2(ххх.ххх.18.16 255.255.255.192). Пакеты через это подключение не идут, шлюз xxx.xxx.18.1, он тоже недоступен.
Подскажите, пожалуйста, в чем может быть дело?