Помогите плиз... Никак не могу настроить VPN. Задача стоит следующая.

Нужно на Cisco 2800 настроить pptp VPN таким образом чтобы он изнутри пускал наружу.
То-есть пользователь из локальной сети логиниться на циску получает pptp-коннект с маршрутизируемым адресом и таким образом выходит в интернет.

Для начала пользователи хронятся локально на самой циске.
Пул адресов тоже один. Я взял для тестов локальную сеть 10.0.16.0/24

Проблема в следующем:
Если я пингую клиенский хост который получил адрес скажем 10.0.16.15 то пинги проходят.
А если я хочу пустить пинг с 10.0.16.15 куда-либо то пакеты долетают до шлюза 10.0.16.2

version 12.3                      
service timestamps debug datetime msec
service timestamps log datetime msec  
no service password-encryption        
!                                    
hostname VPN                          
!                                    
boot-start-marker                    
boot-end-marker                      
!                                    
enable secret 5 $1$C.B/$mS
!                                            
aaa new-model                                
!                                            
!                                            
aaa authentication ppp default local          
!                                            
aaa session-id common                        
!                                            
resource policy                              
!                                            
ip subnet-zero                                
!                                            
!                                            
ip cef                                        
no ip dhcp use vrf connected                  
!                                            
!                                            
ip domain name xxxx.xx                        
ip name-server xxx.xxx.xxx.xxx                
ip ssh version 2                              
no ip ips deny-action ips-interface          
vpdn enable                                  
vpdn ip udp ignore checksum                  
!                                            
vpdn-group 1                                  
! Default PPTP VPDN group                    
accept-dialin                                
  protocol pptp                              
  virtual-template 1                          
local name VPN                          
!                                            
!                                            
no ftp-server write-enable                    
!                                            
!                                            
!                                            
!                                            
!                                            
!                                            
!                                            
!                                            
!                                            
!                                            
!                                            
!                                            
!                                            
!                                            
username user secret 5 $1$TPdO$1
!                                                  
!                                                  
!                                                  
!
!
!
interface GigabitEthernet0/0
description LAN
ip address xxx.xxx.xxx.xxx 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
description WAN
ip address 10.0.16.2 255.255.255.0
shutdown
duplex auto
speed auto
!
interface Virtual-Template1
ip unnumbered GigabitEthernet0/1
ip mroute-cache
peer default ip address pool VPN-IN
!
ip local pool VPN 10.0.16.10 10.0.16.20
ip default-gateway xxx.xxx.xxx.xxx
ip classless
ip route 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx
!
!
no ip http server
no ip http secure-server
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
logging synchronous
history size 256
transport preferred none
transport input ssh
line vty 5 15
logging synchronous
history size 256
transport preferred none
transport input ssh
!
scheduler allocate 20000 1000
!
end