Пытаюсь прокинуть дефолтовый маршрут из центра на филиал. Маршрут по умолчанию появляется в филиале в sh ip route, но трафик в центр адресованных в инет, не идет.Центр
p inspect name IPFW dns
ip inspect name IPFW http
ip inspect name IPFW tcp
ip inspect name IPFW udp
ip inspect name IPFW icmp
ip inspect name IPFW ftp
crypto map vpn 10 ipsec-isakmp
set peer 10.10.3.254
set transform-set temp
match address Center_to_Filial
interface Tunnel0
ip address 172.17.1.1 255.255.255.0
ip tcp adjust-mss 1460
tunnel source Vlan4
tunnel destination 10.10.3.254
!
!
interface FastEthernet0/0
description Local
ip address 192.168.10.1 255.255.255.0
ip access-group FUCK in
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
ip default-network 192.168.10.0
ip route 0.0.0.0 0.0.0.0 1.1.1.1
ip route 10.0.0.0 255.0.0.0 10.10.1.1
router eigrp 10
network 172.17.1.0 0.0.0.255
network 172.17.2.0 0.0.0.255
network 192.168.0.0 0.0.15.255
network 192.168.254.0
distribute-list denylist out
no auto-summary
ip access-list standard denylist
permit 192.168.0.0 0.0.15.255
permit 192.168.254.0 0.0.0.255
!
ip access-list extended Center_to_Filial
permit gre host 10.10.1.254 host 10.10.3.254
ip nat pool Crack 1.1.1.1 1.1.1.1 netmask 255.255.255.248
ip nat inside source list new pool Crack overload
p access-list extended new
deny ip 192.168.10.0 0.0.0.255 192.168.30.0 0.0.0.255
permit ip 192.168.10.0 0.0.0.255 any
Sh ip route:
Gateway of last resort is 1.1.1.1 to network 0.0.0.0
C* 192.168.10.0/24 is directly connected, FastEthernet0/0
1.1.1.1/29 is subnetted, 1 subnets
C 1.1.1.1 is directly connected, Vlan3
172.17.0.0/24 is subnetted, 2 subnets
C 172.17.1.0 is directly connected, Tunnel0
C 10.0.0.0/8 [1/0] via 10.10.1.1
S* 0.0.0.0/0 [1/0] via 1.1.1.1
D 192.168.16.0/23 [90/297246976] via 172.17.1.2, 00:13:11, Tunnel0
Конфиг филиала
crypto map vpn 10 ipsec-isakmp
set peer 10.10.1.254
set transform-set temp
match address Filial_to_Center
!
!
!
interface Tunnel0
ip address 172.17.1.2 255.255.255.0
ip tcp adjust-mss 1460
tunnel source FastEthernet0/1
tunnel destination 10.10.1.254
interface FastEthernet0/0
ip address 192.168.16.1 255.255.254.0
duplex auto
speed auto
ip route 10.0.0.0 255.0.0.0 10.10.3.1
ip access-list extended Filial_to_Center
permit gre host 10.10.3.254 host 10.10.1.254
sh ip route:
Gateway of last resort is 172.17.1.1 to network 192.168.10.0
D* 192.168.10.0/24 [90/297246976] via 172.17.1.1, 00:24:26, Tunnel0
172.17.0.0/24 is subnetted, 1 subnets
C 172.17.1.0 is directly connected, Tunnel0
C 192.168.16.0/23 is directly connected, FastEthernet0/0
Как видно марщрут появился на филиале но пропинговать что-либо в инете из филиала не получается..Что еще нужно сделать?
