Исходное сообщение
"Проблема с IpSec тунелем" Отправлено Fiser, 23-Авг-06 06:15
>>>Все правильно кроме: >>> >>>crypto map vpn 100 ipsec-isakmp >>> set peer 195.162._____ >>> set transform-set vpn >>> match address 101 >>> >>>interface Dialer1 >>> ip address 87.103.________ 255.255.255.0 >>> ip mtu 1492 >>> ip nat outside >>> ip virtual-reassembly >>> encapsulation ppp >>> dialer pool 1 >>> ppp authentication pap callin >>> ppp pap sent-username ________ e password 0 __________ >>> crypto map depfin >>>             >>>^^^^^^^ >>>//ЧТО ЗА КРИПТОМАП ТАКОЙ??? В ТВОЕМ КОНФИГЕ ОН НЕ ОПИСАН! >>> >>>У тебя есть crypto map vpn вот его и подставляй >> >>я извеняюсь там стоит не crypto map depfin а crypto map vpn >>эт я не правильно конфу скинул >>и все равно не работает >покажите актуальные конфиги, относящиеся к тунелям и дебаги >debug crypto isakmp >debug crypto ipsec Итак конфиг 1-й циски Building configuration... vpdn-group pppoe request-dialin   protocol pppoe ! no ftp-server write-enable ! ! ! ! ! crypto isakmp policy 10 encr 3des hash md5 authentication pre-share group 2 crypto isakmp key 111 address 87.103.х.х ! ! crypto ipsec transform-set vpn esp-3des esp-sha-hmac ! crypto map vpn 100 ipsec-isakmp set peer 87.103.x.x set transform-set vpn match address 101 ! ! ! interface ATM0 no ip address no atm ilmi-keepalive dsl operating-mode auto hold-queue 224 in ! interface ATM0.1 point-to-point pvc 0/35   pppoe-client dial-pool-number 1 ! ! interface Vlan1 description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$ ip address 172.16.19._ 255.255.255.0 ip nat inside ip virtual-reassembly ip tcp adjust-mss 1452 ! interface Dialer1 ip address 87.103.y.y 255.255.255.0 ip mtu 1492 ip nat outside ip virtual-reassembly encapsulation ppp dialer pool 1 ppp authentication pap callin ppp pap sent-username ___password __ crypto map vpn ! ip classless ip route 0.0.0.0 0.0.0.0 Dialer1 ! ip http server ip http authentication local ip http secure-server ip http timeout-policy idle 600 life 86400 requests 10000 ip nat translation max-entries 10 ip nat inside source list 100 interface Dialer1 overload ! access-list 100 deny   ip 172.16.19.0 0.0.0.255 172.16.29.0 0.0.0.255 access-list 100 permit ip 172.16.19.0 0.0.0.255 any access-list 101 permit ip 172.16.19.0 0.0.0.255 172.16.29.0 0.0.0.255 no cdp run !               КОНФА ВТОРОЙ ЦИСКИ ! vpdn-group pppoe request-dialin   protocol pppoe ! no ftp-server write-enable ! crypto isakmp policy 10 encr 3des hash md5 authentication pre-share group 2 crypto isakmp key 111 address 87.103.y.y ! ! crypto ipsec transform-set vpn esp-3des esp-sha-hmac ! crypto map vpn 100 ipsec-isakmp set peer 87.103.y.y set transform-set vpn match address 101 ! ! ! interface ATM0 no ip address no atm ilmi-keepalive dsl operating-mode auto hold-queue 224 in ! interface ATM0.1 point-to-point pvc 0/35   pppoe-client dial-pool-number 1 ! ! interface Vlan1 description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$ ip address 172.16.29.2 255.255.255.0 ip nat inside ip virtual-reassembly ip tcp adjust-mss 1452 ! interface Dialer1 ip address negotiated ip mtu 1492 ip nat outside ip virtual-reassembly encapsulation ppp dialer pool 1 ppp authentication pap callin ppp pap sent-username _______ password ________ crypto map vpn ! ip classless ip route 0.0.0.0 0.0.0.0 Dialer1 ! ip http server ip http authentication local ip http secure-server ip http timeout-policy idle 600 life 86400 requests 10000 ip nat inside source list 100 interface Dialer1 overload ! access-list 100 deny   ip 172.16.29.0 0.0.0.255 172.16.19.0 0.0.0.255 access-list 100 permit ip 172.16.29.0 0.0.0.255 any access-list 101 permit ip 172.16.29.0 0.0.0.255 172.16.19.0 0.0.0.255 no cdp run ! control-plane ! !