Здравствуйте уважаемые!
Проблема в том что не могу никак заставить диалапщиков из Group-Access2 заставить ходить через нат. Подозреваю что не прокатывает это из за policy-routing, которое в моем случае необходимо потому как циска разруливает два канала. Буду благодарен за любые коментарии, подсказки etc.

=============================================================

Cisco Internetwork Operating System Software
IOS (tm) C2600 Software (C2600-I-M), Version 12.2(8)T5, RELEASE SOFTWARE (fc1)
TAC Support: http://www.cisco.com/tac
Copyright (c) 1986-2002 by cisco Systems, Inc.
Compiled Fri 21-Jun-02 08:50 by ccai
Image text-base: 0x80008074, data-base: 0x80A2BD40

ROM: System Bootstrap, Version 12.2(7r) [cmong 7r], RELEASE SOFTWARE (fc1)

Energomera-GLOB uptime is 1 week, 20 hours, 13 minutes
System returned to ROM by reload
System image file is "flash:c2600-i-mz.122-8.T5.bin"

cisco 2611XM (MPC860P) processor (revision 0x100) with 27648K/5120K bytes of memory.
Processor board ID JAD07130SJY (744957411)
M860 processor: part number 5, mask 2
Bridging software.
X.25 software, Version 3.0.0.
Basic Rate ISDN software, Version 1.1.
2 FastEthernet/IEEE 802.3 interface(s)
2 Serial(sync/async) network interface(s)
1 ISDN Basic Rate interface(s)
8 terminal line(s)
32K bytes of non-volatile configuration memory.
16384K bytes of processor board System flash (Read/Write)

=============================================================

Building configuration...

Current configuration : 4584 bytes
!
version 12.2
no service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname XXX
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication ppp default group radius
aaa authentication ppp dial if-needed local
aaa authorization exec default group radius
aaa authorization exec dial local
aaa authorization network default group radius
aaa authorization network dial local
aaa accounting update newinfo
aaa accounting network default start-stop group radius
aaa accounting connection default start-stop group radius
aaa nas port extended
aaa session-id common
enable secret 5 XXXX
!
<skipped usernames>

clock timezone MSK 3
ip subnet-zero
!
!
ip name-server xxxxxx
!
isdn switch-type basic-ni
modemcap entry PERS_CAP0:MSC=&F@M15Ю\T10O1
!
!
!
interface Loopback0
ip address 192.168.0.10 255.255.255.0
!
interface FastEthernet0/0
ip address 10.10.0.1 255.255.255.240
ip access-group 101 in
ip policy route-map ISP-GLOBAL
duplex auto
speed auto
no cdp enable
!
interface Serial0/0
ip address 10.40.0.1 255.255.255.252
ip access-group 101 in
no ip mroute-cache
no fair-queue
no cdp enable
!
interface BRI0/0
ip unnumbered FastEthernet0/1
ip access-group 101 in
encapsulation ppp
ip policy route-map ISP-ELE-SVYAZ
dialer idle-timeout 28800
isdn switch-type basic-ni
no peer default ip address
no fair-queue
no cdp enable
ppp authentication pap dial
ppp authorization dial
ppp multilink
!
interface FastEthernet0/1
ip address 10.20.0.1 255.255.255.248
ip access-group 101 in
no ip redirects
ip nat outside
no ip mroute-cache
ip policy route-map ISP-ELE-SVYAZ
duplex auto
speed auto
no cdp enable
!
interface Serial0/1
ip address 10.50.0.1 255.255.255.252
encapsulation ppp
no ip mroute-cache
no cdp enable
!
interface Group-Async1
ip unnumbered FastEthernet0/0
ip access-group 101 in
encapsulation ppp
ip tcp header-compression passive
no ip mroute-cache
ip policy route-map ISP-GLOBAL
keepalive 600
async default routing
async dynamic routing
async mode interactive
no peer default ip address
ppp authentication pap
group-range 33 38
!
interface Group-Async2
ip unnumbered Loopback0
ip access-group 101 in
ip nat inside
encapsulation ppp
ip tcp header-compression passive
no ip mroute-cache
async mode interactive
peer default ip address pool pooll
ppp max-bad-auth 3
ppp authentication pap dial
ppp authorization dial
group-range 39 40
!
ip local pool pool1 10.10.0.10 10.10.0.15
ip local pool pooll 192.168.0.7 192.168.0.8
ip nat pool dialuppers 10.20.0.10 10.20.0.10 netmask 255.255.255.248
ip nat inside source list 1 pool dialuppers overload
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0
ip route 0.0.0.0 0.0.0.0 Serial0/1
no ip http server
ip pim bidir-enable
!
!
access-list 1 permit 192.168.0.8
access-list 1 permit 192.168.0.7
access-list 50 permit 10.10.0.0 0.0.0.15
access-list 60 permit 10.20.0.0 0.0.0.7
access-list 101 deny 53 any any
access-list 101 deny 55 any any
access-list 101 deny 77 any any
access-list 101 deny pim any any
access-list 101 permit ip any any
no cdp run
route-map ISP-ELE-SVYAZ permit 10
match ip address 60
set interface Serial0/1
!
route-map ISP-GLOBAL permit 5
match ip address 50
set interface Serial0/0
!
snmp-server community xxxxx RO
radius-server configure-nas
radius-server host 10.20.0.x auth-port 1812 acct-port 1813
radius-server retransmit 3
radius-server timeout 10
radius-server key 7 0xxxxxxx
radius-server vsa send accounting
radius-server vsa send authentication
!
line con 0
exec-timeout 0 0
line 33 40
modem InOut
modem autoconfigure type PERS_CAP0
autocommand ppp
transport input all
autoselect during-login
autoselect ppp
stopbits 1
flowcontrol hardware
line aux 0
line vty 0 4
password 7 xxxxxxxxx
!
!
end

• диалапщиков через нат, yard, 11:39 , 01-Авг-03, (1)  
• диалапщиков через нат, ВОЛКА, 20:48 , 01-Авг-03, (2)