всем привет. нужно настроит VPN по GRE IPSec. создал вот такой конфиг. но не заработало. что я делаю не так????
Router_A#show run
Building configuration...
Current configuration : 1720 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router_A
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$F0Gu$oh7B0lhKfpZ/l.pXRBpn1/
enable password cisco
!
aaa new-model
!
aaa session-id common
!
resource policy
!
ip cef
!
username cisco password 0 cisco
!
crypto isakmp policy 200
encr aes 256
authentication pre-share
group 2
lifetime 7200
crypto isakmp key sUpeRkEy address 10.10.10.2
!
crypto ipsec transform-set ts-aes-sha esp-aes 256 esp-sha-hmac
!
crypto map cr_outside 10 ipsec-isakmp
set peer 10.10.10.2
set transform-set ts-aes-sha
match address 110
!
interface Tunnel10
ip unnumbered FastEthernet0/0
tunnel source FastEthernet0/0
tunnel destination 10.10.10.2
!
interface FastEthernet0/0
ip address 10.10.11.2 255.255.255.0
shutdown
duplex half
crypto map cr_outside
!
interface Ethernet1/0
no ip address
shutdown
duplex half
!
interface Ethernet1/1
no ip address
shutdown
duplex half
!
interface Ethernet1/2
no ip address
shutdown
duplex half
!
interface Ethernet1/3
no ip address
shutdown
duplex half
!
interface Ethernet1/4
no ip address
shutdown
duplex half
!
interface Ethernet1/5
no ip address
shutdown
duplex half
!
interface Ethernet1/6
no ip address
shutdown
duplex half
!
interface Ethernet1/7
no ip address
shutdown
duplex half
!
ip route 192.168.2.0 255.255.255.0 Tunnel10
!
no ip http server
no ip http secure-server
!
access-list 110 permit gre host 10.10.11.2 host 10.10.10.2
!
control-plane
!
gatekeeper
shutdown
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
!
!
end
Router_A#
Router_B#sh run
Building configuration...
Current configuration : 1380 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router_B
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$W0W9$2iZ.O7haoFwJdZo4ro6YU/
enable password cisco
!
aaa new-model
!
aaa session-id common
!
resource policy
!
ip cef
!
username cisco password 0 cisco
!
crypto isakmp policy 200
encr aes 256
authentication pre-share
group 2
lifetime 7200
crypto isakmp key sUpeRkEy address 10.10.11.2
!
!
crypto ipsec transform-set ts-aes-sha esp-aes 256 esp-sha-hmac
!
crypto map cr_outside 10 ipsec-isakmp
set peer 10.10.11.2
set transform-set ts-aes-sha
match address 110
!
!
!
!
interface Tunnel10
ip unnumbered FastEthernet0/0
tunnel source FastEthernet0/0
tunnel destination 10.10.11.2
!
interface FastEthernet0/0
ip address 10.10.10.2 255.255.255.0
shutdown
duplex half
crypto map cr_outside
!
interface FastEthernet1/0
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet1/1
no ip address
shutdown
duplex auto
speed auto
!
ip route 192.168.1.0 255.255.255.0 Tunnel10
!
no ip http server
no ip http secure-server
!
!
access-list 110 permit gre host 10.10.10.2 host 10.10.11.2
!
!
!
!
control-plane
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
!
!
end
Router_B#
