Всем доброго! Не пойму, в чем дело. Настраивал этот рутер уже раз 15 через SDM, все было в порядке. Потом упала операционная система, сам не смог залить версию, отдал в ремонт. Залили вместо 12.3(8r)YI для 851 роутера 12.4(15)T1 для 851 роутера. SDM весь не вошел - установил без wi-fi. Настроил конфигурацию, поставил - не работает. В чем причина, понять не могу. Внутри сети можно подключиться к роутеру только напрямую (хотя сейчас 871 роутер работает без проблем), наружу пингует только соседний роутер 195.194.252.157, дальше не идет. Сверял конфигурацию 871 и 851 - все параметры совпадают. Выкладываю конфигурацию - может у кого появятся светлые мысли?

Current configuration : 6045 bytes                                  
!
version 12.4            
no service pad              
service timestamps debug datetime msec                                      
service timestamps log datetime msec                                    
no service password-encryption                              
!
hostname yourname                
!
boot-start-marker                
boot-end-marker              
!
logging buffered 52000                      
!
no aaa new-model                
!
!
!
crypto pki trustpoint TP-self-signed-1236078511                                              
enrollment selfsigned                      
subject-name cn=IOS-Self-Signed-Certificate-1236078511                                                      
revocation-check none                      
rsakeypair TP-self-signed-1236078511                                    
!
!
crypto pki certificate chain TP-self-signed-1236078511                                                      
certificate self-signed 01                          
  3082024F DA5940                                            
        quit            
no ip dhcp use vrf connected                            
ip dhcp excluded-address 10.0.0.1 10.0.0.4                                          
ip dhcp excluded-address 10.0.0.50 0.0.0.254                                            
!
ip dhcp pool sdm-pool                    
   import all            
   network 10.0.0.0 255.255.255.0                                
   default-router 10.0.0.1                          
   dns-server 10.0.0.144 195.194.226.1                                  
   lease 1 2            
!
!
ip cef      
ip inspect name SDM_LOW cuseeme                              
ip inspect name SDM_LOW dns                          
ip inspect name SDM_LOW ftp                          
ip inspect name SDM_LOW h323                            
ip inspect name SDM_LOW https                            
ip inspect name SDM_LOW icmp                            
ip inspect name SDM_LOW imap                            
ip inspect name SDM_LOW pop3                            
ip inspect name SDM_LOW rcmd                            
ip inspect name SDM_LOW realaudio                                
ip inspect name SDM_LOW rtsp                            
ip inspect name SDM_LOW esmtp                            
ip inspect name SDM_LOW sqlnet                              
ip inspect name SDM_LOW streamworks                                  
ip inspect name SDM_LOW tftp                            
ip inspect name SDM_LOW tcp                          
ip inspect name SDM_LOW udp                          
ip inspect name SDM_LOW vdolive                              
no ip domain lookup                  
ip domain name yourdomain.com                            
!
!
!
username N privilege 15 secret 5 $1$mwXZNVDee.                                                                  
archive      
log config          
  hidekeys          
!
!
!
!
!
interface FastEthernet0                      
!
interface FastEthernet1                      
!
interface FastEthernet2                      
!
interface FastEthernet3                      
!
interface FastEthernet4                      
description $ETH-LAN$$FW_OUTSIDE$                                  
ip address 195.194.252.158 255.255.255.252                                          
ip access-group 101 in                      
ip verify unicast reverse-path                              
ip inspect SDM_LOW out                      
ip nat outside              
ip virtual-reassembly                      
duplex auto            
speed auto          
!
interface Dot11Radio0                    
no ip address              
shutdown        
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0                                                                                
54.0    
station-role root                  
!
interface Vlan1              
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$FW_INSIDE$                                                            
ip address 10.0.0.1 255.255.255.0                                  
ip access-group 100 in                      
ip nat inside              
ip virtual-reassembly                      
ip tcp adjust-mss 1452                      
!
!
ip http server              
ip http access-class 23                      
ip http authentication local                            
ip http secure-server                    
ip http timeout-policy idle 60 life 86400 requests 10000                                                        
ip nat inside source list 1 interface FastEthernet4 overload                                                            
!
access-list 1 remark SDM_ACL Category=2                                      
access-list 1 permit 10.0.0.0 0.0.0.255                                      
access-list 100 remark auto generated by SDM firewall configuration                                                                  
access-list 100 remark SDM_ACL Category=1                                        
access-list 100 deny   ip 195.194.252.156 0.0.0.3 any                                                    
access-list 100 deny   ip host 255.255.                                    
access-list 100 deny   ip 127.0.0.0 0.255.255.255 any                                                    
access-list 100 permit ip any any                                
access-list 101 remark auto generated by SDM firewall configuration                                                                  
access-list 101 remark SDM_ACL Category=1                                        
access-list 101 deny   ip 10.0.0.0 0.0.0.255 any                                                
access-list 101 permit icmp any host 195.194.252.158                                                                                                                  
access-list 101 permit tcp any host 195.194.252.158 eq 443                                                        
access-list 101 permit tcp any host 195.194.252.158 eq 22                                                        
access-list 101 permit tcp any host 195.194.252.158 eq cmd                                  
access-list 101 deny   ip 10.0.0.0 0.255.255.255 any                                                    
access-list 101 deny   ip 172.16.0.0 0.15.255.255 any                                                    
access-list 101 deny   ip 192.168.0.0 0.0.255.255 any                                                    
access-list 101 deny   ip 127.0.0.0 0.255.255.255 any                                                    
access-list 101 deny   ip host 255.255.255.255 any                                                  
access-list 101 deny   ip host 0.0.0.0 any                                          
access-list 101 deny   ip any any log                                    
no cdp run          
!
control-plane            
!
banner login ^C              
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler max-task-time 5000
end