https://ssl.opennet.dev/openforum/vsluhforumID6/21820.html Доброго!<br><br>Уважаемые, подскажите пожалуйста, где копать:<br><br>- VPN server: Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(11)XJ3, RELEASE SOFTWARE (fc1)<br>- VPN client: win 7<br><br>IPSEC + NAT-T работает (pre-shared key), а в PPP затык:<br><br>Oct 26 09:28:43.174: ppp65 PPP: Send Message[Dynamic Bind Response]<br>Oct 26 09:28:43.178: ppp65 PPP: Using vpn set call direction<br>Oct 26 09:28:43.178: ppp65 PPP: Treating connection as a callin<br>Oct 26 09:28:43.178: ppp65 PPP: Session handle[3100004B] Session id[65]<br>Oct 26 09:28:43.178: ppp65 PPP: Phase is ESTABLISHING, Passive Open<br>Oct 26 09:28:43.178: ppp65 LCP: State is Listen<br>Oct 26 09:28:43.190: ppp65 LCP: I CONFREQ [Listen] id 0 len 21<br>Oct 26 09:28:43.190: ppp65 LCP: MRU 1400 (0x01040578)<br>Oct 26 09:28:43.190: ppp65 LCP: MagicNumber 0x64A016D8 (0x050664A016D8)<br>Oct 26 09:28:43.190: ppp65 LCP: PFC (0x0702)<br>Oct 26 09:28:43.190: ppp65 LCP: ACFC (0x0802)<br>Oct 26 09:28:43.190: ppp65 LCP: Callback 6 (0x0D0306)<br>Oct 26 09:28:43. https://ssl.opennet.dev/openforum/vsluhforumID6/21820.html#5 Mon, 01 Nov 2010 15:56:43 GMT &gt; конфиг покажите<br><br>Доброго всем вечера.<br>Решилось апгрейдом иоса до c2800nm-advipservicesk9-mz.124-24.T.bin<br>Конфиг в порядке.<br><br>Всем спасибо за внимание и помощь!<br>Алексей<br> https://ssl.opennet.dev/openforum/vsluhforumID6/21820.html#4 Tue, 26 Oct 2010 13:51:33 GMT &gt;[оверквотинг удален]<br>&gt; ip unnumbered Vlan1<br>&gt; ip virtual-reassembly<br>&gt; peer default ip address pool VPNPOOL<br>&gt; ppp encrypt mppe auto<br>&gt; ppp authentication chap ms-chap ms-chap-v2<br>&gt; !<br>&gt; ip local pool VPNPOOL 10.44.0.128 10.44.0.160<br>&gt; interface Vlan1<br>&gt; ip address 10.44.0.71 255.255.255.0<br>&gt; !<br><br>Попробуйте следующее<br>ppp authentication chap ms-chap ms-chap-v2 callin<br> https://ssl.opennet.dev/openforum/vsluhforumID6/21820.html#3 Tue, 26 Oct 2010 13:48:12 GMT &gt;[оверквотинг удален]<br>&gt; ip unnumbered Vlan1<br>&gt; ip virtual-reassembly<br>&gt; peer default ip address pool VPNPOOL<br>&gt; ppp encrypt mppe auto<br>&gt; ppp authentication chap ms-chap ms-chap-v2<br>&gt; !<br>&gt; ip local pool VPNPOOL 10.44.0.128 10.44.0.160<br>&gt; interface Vlan1<br>&gt; ip address 10.44.0.71 255.255.255.0<br>&gt; !<br><br> vpdn-group 2<br> ! Default L2TP VPDN group<br> accept-dialin<br> protocol l2tp<br> virtual-template 10<br> lcp renegotiation on-mismatch<br> no l2tp tunnel authentication<br> l2tp security crypto-profile L2TP<br> ip pmtu<br> ip mtu adjust<br><br> crypto isakmp policy 10<br> hash md5<br> authentication pre-share<br><br> crypto ipsec transform-set L2TP esp-des esp-md5-hmac<br> mode transport<br><br> crypto isakmp key your-pre-shared-key address 0.0.0.0 0.0.0.0<br><br> interface Virtual-Template10<br> mtu 1400<br> ip unnumbered Vlan1<br> ip virtual-reassembly<br> peer default ip address pool VPNPOOL<br> autodetect encapsulation ppp<br> ppp encrypt mppe auto<br> ppp authentication chap ms-chap ms-chap-v2<br><br>на внешнем интерфейсе<br>interface https://ssl.opennet.dev/openforum/vsluhforumID6/21820.html#2 Tue, 26 Oct 2010 10:58:18 GMT &gt; конфиг покажите<br><br>Вот про ППП:<br><br>aaa new-model<br>aaa authentication ppp default local<br>aaa session-id common<br><br>vpdn enable<br><br>vpdn-group 2<br>! Default L2TP VPDN group<br> accept-dialin<br> protocol l2tp<br> virtual-template 10<br> lcp renegotiation on-mismatch<br> no l2tp tunnel authentication<br><br>username uu password 0 pp<br><br>interface Virtual-Template10 <br> mtu 1400<br> ip unnumbered Vlan1<br> ip virtual-reassembly<br> peer default ip address pool VPNPOOL<br> ppp encrypt mppe auto<br> ppp authentication chap ms-chap ms-chap-v2<br>!<br><br>ip local pool VPNPOOL 10.44.0.128 10.44.0.160<br><br>interface Vlan1<br> ip address 10.44.0.71 255.255.255.0<br>!<br> https://ssl.opennet.dev/openforum/vsluhforumID6/21820.html#1 Tue, 26 Oct 2010 10:41:15 GMT конфиг покажите<br>