Коллеги, может кто то сталкивался, не подымается тунель, команда
#sh crypto isakmp sa показывает пусто, пинг на 192.168.0.50 не проходит. Вот конфиг моего Cisco:
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
group 2
lifetime 18000
crypto isakmp key CompanyFR address 122.19.113.7
!
crypto ipsec security-association lifetime seconds 28800
!
crypto ipsec transform-set RG-VPN esp-3des esp-md5-hmac
crypto ipsec df-bit clear
!
crypto map ENCRYPT-FR 1 ipsec-isakmp
description VPN tunnel to 192.168.0.50
set peer 122.19.113.7
set transform-set VPN-FR
set pfs group2
match address ACL-FR
!
interface FastEthernet0
description ISP
ip address 10.10.10.20 255.255.0.0
ip verify unicast reverse-path
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
ip route-cache flow
duplex auto
speed auto
no cdp enable
crypto map ENCRYPT-FR
interface Vlan1
description LAN
ip address 172.21.21.20 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 10.10.10.1