Исходное сообщение
"NAT over ipsec tunnel" Отправлено sergeyf, 17-Май-10 19:41
>В такой схеме не будет работать. Нужно криптовать Тунель не crypto map, >а tunnel protection ipsec. И настроивать обычный NAT overload. crypto isakmp policy 10 encr aes 256 authentication pre-share group 5 crypto isakmp key KKEEYYYYYY address remote_host_ip crypto isakmp keepalive 10 crypto ipsec transform-set TS1 esp-aes 256 esp-sha-hmac crypto ipsec profile PROFILE1 set transform-set TS1 set pfs group5 interface Tunnel0 ip address YY.YY.YY.1 255.255.255.0 ip nat outside ip virtual-reassembly no ip mroute-cache tunnel source Fastethernet4 tunnel destination AA.AA.AA.1 tunnel mode ipsec ipv4 tunnel protection ipsec profile PROFILE1 interface Vlan1 description LAN_LOCAL ip address XX.XX.XX.1 255.255.255.0 ip nat inside ip virtual-reassembly ip nat inside source list nating interface Tunnel0 overload Сделал так, но похоже шифрование не пошло судя по дебагу ISAKMP:(1010):deleting node 232274360 error TRUE reason "Delete Larval" 2010-05-17 21:14:51    Local7.Debug    4341: *Mar  3 06:36:31.559: ISAKMP:(1010):deleting node 990746009 error FALSE reason "Informational (in) state 1" 2010-05-17 21:14:51    Local7.Debug    4342: *Mar  3 06:36:31.559: ISAKMP:(1010):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY 2010-05-17 21:14:51    Local7.Debug    4343: *Mar  3 06:36:31.559: ISAKMP:(1010):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE ПОМОГИТЕ!!!