Ловите:Current configuration : 1972 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname TEST1
!
boot-start-marker
boot-end-marker
!
!
username cisco password 0 ofp
username configurator privilege 15 secret 5 $1$OBq9$hafryCx8EKj6WQRvDtKRu.
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
aaa new-model
!
!
aaa authentication login userauthen local
aaa authorization network groupauthor local
aaa session-id common
ip subnet-zero
!
!
ip domain name TTTTT
!
!
ip cef
ip audit po max-events 100
no ftp-server write-enable
!
!
!
!
!
!
crypto isakmp policy 3
encr 3des
hash md5
authentication pre-share
group 2
!
crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
crypto isakmp key HHHHHYYTTT address 172.19.9.2 no-xauth
!
crypto isakmp client configuration group monitor
key monitor
pool ippool
!
!
crypto ipsec transform-set Table1 esp-3des esp-sha-hmac
crypto ipsec df-bit clear
!
crypto dynamic-map dynmap 1
set transform-set Table1
reverse-route
!
!
crypto map CKV_LPM client authentication list userauthen
crypto map CKV_LPM isakmp authorization list groupauthor
crypto map CKV_LPM client configuration address respond
crypto map CKV_LPM 2 ipsec-isakmp dynamic dynmap
crypto map CKV_LPM 10 ipsec-isakmp
set peer 172.19.9.2
set transform-set Table1
match address TEST2
!
!
!
interface Ethernet0
ip address 172.19.9.1 255.255.0.0
half-duplex
no cdp enable
crypto map CKV_LPM
!
interface FastEthernet0
ip address 182.19.10.1 255.255.255.0
speed auto
no cdp enable
!
ip local pool ippool 11.11.11.1 11.11.11.101
ip classless
ip route 0.0.0.0 0.0.0.0 172.19.0.1
ip route 182.19.11.0 255.255.255.0 172.19.9.2
no ip http server
no ip http secure-server
!
!
!
ip access-list extended TEST2
permit ip 182.19.10.0 0.0.0.255 182.19.11.0 0.0.0.255
no cdp run
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
privilege level 15
transport input ssh
!
!
end
Второй роутер 172.19.9.2, сетка за ним - 182.19.11.0
VPN клиент подключается, туннель между роутерами тоже поднимается
Наверное, какая-то опция была неправильно установлена перед этим... Легче оказалось полностью переконфигурировать.
