Доброго времени суток. Подскажите, плиз, где ошибка.. настроил site-to-site между длинком и 1811
VPN поднимается нормально. Но не вижу ни с циски удаленную сеть, ни с длинка сеть офиса.
Конфиг:

logging buffered 52000 debugging
!
aaa new-model
!
aaa session-id common
!
resource policy
!
ip cef
!
!
ip name-server 212.188.4.10
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
lifetime 28800
!
crypto isakmp policy 2
encr 3des
authentication pre-share
group 2
lifetime 3600
crypto isakmp key xxxxxx address 6x.6x.1x.181
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
!
crypto map SDM_CMAP_1 1 ipsec-isakmp
description Tunnel to remote
set peer 6x.6x.1x.181
set transform-set ESP-3DES-SHA
match address 100

!
interface FastEthernet0
description $ETH-WAN$
ip address xx.xx.xx.xx 255.255.255.248
speed auto
full-duplex
crypto map SDM_CMAP_1
!
interface FastEthernet1
shutdown

!
interface FastEthernet2
interface FastEthernet3
interface FastEthernet4
interface FastEthernet5
interface FastEthernet6
interface FastEthernet7
interface FastEthernet8
interface FastEthernet9
!
interface Vlan1
ip address 172.16.3.1 255.255.255.0
!
interface Async1
no ip address
encapsulation slip
!
ip route 0.0.0.0 0.0.0.0 {шлюз провайдера}
!
ip http server
ip http secure-server
!
access-list 100 remark SDM_ACL Category=4
access-list 100 remark IPSec Rule
access-list 100 permit ip any 172.16.254.0 0.0.0.255
!
control-plane
!
!
line con 0
line 1
line aux 0
line vty 0 4
!
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
end

• site-to-site cisco 1811 d-link 804,GolDi, 10:40 , 05-Май-10
  • site-to-site cisco 1811 d-link 804,colorit, 14:26 , 05-Май-10

>[оверквотинг удален]
> encapsulation slip
>!
>ip route 0.0.0.0 0.0.0.0 {шлюз провайдера}
>!
>ip http server
>ip http secure-server
>!
>access-list 100 remark SDM_ACL Category=4
>access-list 100 remark IPSec Rule
>access-list 100 permit ip any 172.16.254.0 0.0.0.255

access-list 100 permit ip 172.16.3.0 0.0.0.255  сетка за DLINK-ом

>[оверквотинг удален]
>line aux 0
>line vty 0 4
>!
>!
>webvpn context Default_context
> ssl authenticate verify all
> !
> no inservice
>!
>end

спасибо! разобрался.. хорошая статья на цисколабе есть...