Исходное сообщение
"Cisco 881 +VPN" Отправлено Michail_M, 01-Ноя-10 10:53
Туннель сделал. Работает. Но в сеть не пускает - дальше маршрутизатора со стороны основной сети не идет. (Адреса внешней сети взял с потолка - маршрутизаторы тупо соединил друг с другом внешними портами для облегчения настройки) GW#sh run Building configuration... Current configuration : 4850 bytes ! ! Last configuration change at 08:09:42 UTC Mon Nov 1 2010 by michail ! version 15.1 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname GW ! boot-start-marker boot-end-marker ! logging buffered 51200 warnings ! no aaa new-model memory-size iomem 10 ip source-route ! ! ! ! ip cef no ip domain lookup no ipv6 cef ! ! ! crypto pki trustpoint TP-self-signed-3234641122 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-3234641122 revocation-check none rsakeypair TP-self-signed-3234641122 ! ! crypto pki certificate chain TP-self-signed-3234641122 certificate self-signed 01   30820243 308201AC A0030201 02020101 300D0609 2A864886 F70D0101 04050030   31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274   69666963 6174652D 33323334 36343131 3232301E 170D3130 31303237 31323431   31335A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649   4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 32333436   34313132 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281   8100B7CF 8095E349 4AE3527F DA1CFC93 CCBE062F C69CF8E7 DDD6CF3F 5041716B   895E1263 DEA5BC41 4DCFC4EA C7CC21FA A0BC8FF6 8959A298 C85A7F8C 8087161D   17F2DF58 DA3B930E D2D70829 7B824E23 E477344E 8BFBE4D4 BFDF081F 23FC208F   58AAFBD2 A1207413 AE8CF4DD 77C67FE9 4A942B12 A78E7ABC 5DC2A79A 106E4E81   5F090203 010001A3 6B306930 0F060355 1D130101 FF040530 030101FF 30160603   551D1104 0F300D82 0B47575F 56535F50 656E7A61 301F0603 551D2304 18301680   14718F63 C18F966F F2F53CBD 97484924 85496BEC 51301D06 03551D0E 04160414   718F63C1 8F966FF2 F53CBD97 48492485 496BEC51 300D0609 2A864886 F70D0101   04050003 8181001F 92B36B56 5FF16F1C DE26E6BD BCD5162D 2BAE0344 B54E3B32   005A3C01 CB1FC2F2 DB0ABB1A 95CD1A85 FF3DFE29 FC0B0B28 C698817C D1B3B378   1BF1587B 1325021C 55226D83 8916525A 5104D583 C1947438 DA4E5C70 CE40E4B4   25C1276E 77576857 46153EEC E0789DDA 6F0F9D98 0746E2E8 95FAB488 0BA5D703   61DDC8B3 F77671         quit license udi pid CISCO881-K9 sn FCZ14339371 ! ! ! ! ! ! ! ! interface Tunnel100 description Tunnel to main office ip unnumbered Vlan1 tunnel source FastEthernet4 tunnel destination 71.10.19.35 ! interface FastEthernet0 ! interface FastEthernet1 ! interface FastEthernet2 ! interface FastEthernet3 ! interface FastEthernet4 description $ES_WAN$ ip address 71.10.19.34 255.255.255.0 duplex auto speed auto ! interface Vlan1 description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$ ip address 10.1.1.171 255.255.255.0 ip tcp adjust-mss 1452 ! ip forward-protocol nd ip http server ip http authentication local ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ! ip route 192.168.1.0 255.255.255.0 Tunnel100 ! no cdp run ! ! ! ! ! control-plane ! ! line con 0 login local no modem enable line aux 0 line vty 0 4 privilege level 15 login local transport input telnet ssh ! end Ext#sh run Building configuration... Current configuration : 4894 bytes ! ! Last configuration change at 07:09:42 UTC Mon Nov 1 2010 by michail ! version 15.1 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Ext ! boot-start-marker boot-end-marker ! logging buffered 51200 warnings ! no aaa new-model memory-size iomem 10 ip source-route ! ! ! ! ip cef no ip domain lookup no ipv6 cef ! ! ! crypto pki trustpoint TP-self-signed-3354675918 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-3354675918 revocation-check none rsakeypair TP-self-signed-3354675918 ! ! crypto pki certificate chain TP-self-signed-3354675918 certificate self-signed 01   30820244 308201AD A0030201 02020101 300D0609 2A864886 F70D0101 04050030   31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274   69666963 6174652D 33333534 36373539 3138301E 170D3130 31303235 30343235   35335A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649   4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 33353436   37353931 3830819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281   8100A37B 9AB40038 19E3C560 A16D8FA2 1E896F33 6427FAE4 498C6A71 03675A5C   4DFF0207 5BE311AE 5A007FD9 350AAD99 34F217EE CF8F96D9 82D64B1F 5D6C24E2   3B941EB5 BBF86F33 083AFF6E F7A96D4A 3DF4A3C8 AC3D3E81 B9141307 C22BDB30   C01C405D EBDB2222 01E90F01 CD1F22F3 78726161 54593D35 EA0977C0 97FC01EA   52EF0203 010001A3 6C306A30 0F060355 1D130101 FF040530 030101FF 30170603   551D1104 10300E82 0C457874 5F56535F 50656E7A 61301F06 03551D23 04183016   80142168 974A059F 7012CA8D 064E16CB 12E3ECD8 A26A301D 0603551D 0E041604   14216897 4A059F70 12CA8D06 4E16CB12 E3ECD8A2 6A300D06 092A8648 86F70D01   01040500 03818100 4AFE29A3 AA24FA01 0C83A012 B8285231 CCA6BDB0 B591994E   DE4C5272 FBA2E920 1EDC5B20 5F4705A1 35DAAC51 FF6AA765 C10ED5AE EF099831   990A0A8A 26C56324 BBC51C65 23B9C661 D105A391 6CEFB407 0A3054E3 92CB3830   F0DB95CD A3F964A3 378B0FE3 D9095360 B3214467 799F8FB4 AFB7100B AA812A10   54C1C00C 640E011C         quit license udi pid CISCO881-K9 sn FCZ1433937F ! ! ! ! ! ! ! ! interface Tunnel100 description Tunnel to remote office ip unnumbered Vlan1 tunnel source FastEthernet4 tunnel destination 71.10.19.34 ! interface FastEthernet0 ! interface FastEthernet1 ! interface FastEthernet2 ! interface FastEthernet3 ! interface FastEthernet4 ip address 71.10.19.35 255.255.255.0 duplex auto speed auto ! interface Vlan1 description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$ ip address 192.168.1.1 255.255.255.0 ip tcp adjust-mss 1452 ! ip forward-protocol nd ip http server ip http authentication local ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ! ip route 10.0.0.0 255.0.0.0 Tunnel100 ! no cdp run ! ! ! ! ! control-plane ! ! line con 0 login local no modem enable line aux 0 line vty 0 4 privilege level 15 login local transport input telnet ssh ! end из сети 192.168.1.0 пинги доходят до маршрутизатора GW - 10.1.1.171, а вот другие адреса в этой сети не пингуются (10.1.1.11 например). С самого маршрутизатора все в порядке. Что-то с маршрутами наверняка, но не вижу что.