Здравствуйте, коллеги! Столкнулся с интересной ситуацией, голову уже сломал, не могу понять в чем дело. На маршрутизаторе настроил Easy VPN. Если подключаюсь к IP 192.168.0.1 то все IP-адреса интерфейсов маршрутизатора пингуются, а если к 192.168.1.1, то не пингуются, хотя подключение также успешно устанавливается. В чем может быть тонкость?Вот конфиг: Current configuration : 4161 bytes ! ! Last configuration change at 17:11:21 MSK Mon Oct 6 2008 ! NVRAM config last updated at 17:11:22 MSK Mon Oct 6 2008 ! upgrade fpd auto version 12.4 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname rtr1-node10 ! boot-start-marker boot-end-marker ! logging message-counter syslog ! aaa new-model ! ! aaa authentication login userauthen local aaa authorization network groupauthor local ! ! aaa session-id common clock timezone MSK 3 clock summer-time MSK recurring last Sun Mar 2:00 last Sun Oct 2:00 clock calendar-valid no ip source-route ip cef ! ! ! ! no ipv6 cef ! multilink bundle-name authenticated ! password encryption aes ! ! archive log config hidekeys ! ! crypto isakmp policy 3 encr 3des authentication pre-share group 2 ! crypto isakmp client configuration group vpnclient key cisco123 pool vpnpool acl 101 ! ! crypto ipsec transform-set myset esp-3des esp-md5-hmac ! crypto dynamic-map dynmap 10 set transform-set myset reverse-route qos pre-classify ! ! crypto map clientmap client authentication list userauthen crypto map clientmap isakmp authorization list groupauthor crypto map clientmap client configuration address respond crypto map clientmap 10 ipsec-isakmp dynamic dynmap ! ! ! ip ssh logging events ip ssh version 2 ! ! ! ! interface Loopback0 ip address 192.168.1.1 255.255.255.0 crypto map clientmap ! interface Loopback1 ip address 172.20.2.1 255.255.255.0 ! interface GigabitEthernet0/1 ip address 192.168.0.1 255.255.255.0 no ip redirects no ip unreachables ip flow ingress ip flow egress ip nat inside ip virtual-reassembly duplex auto speed auto media-type rj45 negotiation auto no cdp enable no mop enabled crypto map clientmap ! interface FastEthernet0/2 no ip address shutdown duplex auto speed auto no cdp enable ! interface GigabitEthernet0/2 ip address 81.14.183.250 255.255.255.252 no ip redirects no ip unreachables no ip proxy-arp ip nat outside ip virtual-reassembly duplex auto speed auto media-type rj45 negotiation auto no cdp enable ! interface GigabitEthernet0/3 no ip address shutdown duplex auto speed auto media-type rj45 negotiation auto no cdp enable ! ip local pool vpnpool 172.20.2.1 172.20.2.30 ip forward-protocol nd ip route 10.0.0.0 255.0.0.0 172.16.2.254 no ip http server no ip http secure-server ! ! logging alarm informational access-list 101 permit ip 172.16.2.0 0.0.0.255 any access-list 101 permit ip 172.16.1.0 0.0.0.255 any access-list 101 permit ip 172.20.2.0 0.0.0.255 any no cdp run ! control-plane ! line con 0 exec-timeout 0 0 stopbits 1 line aux 0 stopbits 1 line vty 0 4 ! no process cpu extended no process cpu autoprofile hog ntp master ntp update-calendar ntp server 194.149.67.130 ntp server 194.87.0.22 ntp server 195.222.162.66 end
|