Исходное сообщение
"cisco 1841: не могу настроить gre+ipsec туннель" Отправлено karen durinyan, 30-Июн-10 15:57
>[оверквотинг удален] > set ip next-hop 212.119.170.1 >! >route-map C-OUT permit 40 > match ip address 40 14 5 > set ip next-hop 217.170.93.17 >! >route-map C-OUT permit 99 > set interface Null0 >! > s pervogo vzgljada... na ciske v moskve: ip route 192.168.2.0 255.255.255.0 FastEthernet0/0 ip route 192.168.3.0 255.255.255.252 Tunnel1 nenuzhni ipsec peer 213.182.181.66 i eto ip stoit na vlan3 na ciske v pitere. na ciske v pitere ipsec peer (moskow endpoint) 212.45.2.67 no default route stoit na 217.170.93.17. dobavte "ip route 212.45.2.67 255.255.255.255 213.182.181.65" route-map zdes ne pomozhet. problema mozhet bit v etom v zavisimosti chto iz sebja predstovljaet gw (RPF - revers path filtring). i nakonec nado proverit' est' li firewall mezhdu piter i msk nepropuskajushi "esp".