Добрый день Есть настройки: на базе 861 серии. Почему то не поднимается туннель =(
R1 (Главный)
policy-map FOO
class class-default
    shape average 128000
!
!
!
crypto isakmp policy 1
hash md5
authentication pre-share
group 2
crypto isakmp key globex address 10.108.0.200
crypto isakmp key globex address 10.77.0.200
crypto isakmp keepalive 20 5
!
!
crypto ipsec transform-set TS esp-des esp-sha-hmac
!
crypto ipsec profile VTI
set transform-set TS
!
!
!
!
!
!
interface Tunnel10
description "gre tunnel to r2"
ip address 10.1.1.1 255.255.255.252
ip mtu 1380
keepalive 10 3
tunnel source FastEthernet4
tunnel destination 10.108.0.200
tunnel path-mtu-discovery
!
interface Tunnel20
description "gre tunnel to r3"
ip address 10.0.2.1 255.255.255.0
keepalive 10 3
tunnel source FastEthernet4
tunnel mode ipsec ipv4
tunnel destination 10.77.0.200
tunnel protection ipsec profile VTI
service-policy output FOO
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
description "internet access for r1"
ip address 10.31.1.50 255.255.255.192
ip virtual-reassembly
duplex auto
speed auto
!
interface Vlan1
description "local network r1"
ip address 192.168.0.100 255.255.255.0
ip virtual-reassembly
!
router rip
version 2
network 10.0.0.0
network 192.168.0.0
!
ip forward-protocol nd
ip http server
no ip http secure-server
!
ip dns server
ip route 0.0.0.0 0.0.0.0 FastEthernet4

и соответственно R2 (второстепенный)таких будет два
policy-map FOO
class class-default
    shape average 128000
!
!
!
crypto isakmp policy 1
hash md5
authentication pre-share
group 2
crypto isakmp key globex address 10.31.1.50
crypto isakmp keepalive 10
!
!
crypto ipsec transform-set TS esp-des esp-sha-hmac
!
crypto ipsec profile TVI
set transform-set TS
!
!
!
!
!
!
interface Tunnel20
description "gre tunnel to r1"
ip address 10.0.2.2 255.255.255.0
keepalive 10 3
tunnel source FastEthernet4
tunnel mode ipsec ipv4
tunnel destination 10.31.1.50
tunnel protection ipsec profile TVI
service-policy output FOO
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
description "internet access for r2"
ip address 10.77.0.200 255.255.255.224
ip virtual-reassembly
duplex auto
speed auto
!
interface Vlan1
description "local network r3"
ip address 192.168.2.100 255.255.255.0
ip virtual-reassembly
!
router rip
version 2
network 10.0.0.0
network 192.168.2.0
!
ip forward-protocol nd
ip http server
no ip http secure-server
!
ip dns server
ip route 0.0.0.0 0.0.0.0 FastEthernet4 10