помогите, задача между двумя роутерами построить защищенный туннель...
конфиг.
clock timezone Msk 3                    
ip subnet-zero              
!
ip name-server 10.10.221.5                          
ip ssh time-out 120                  
ip ssh authentication-retries 3                              
!
crypto isakmp policy 100                        
hash md5        
authentication pre-share                        
crypto isakmp key WhatLight address 10.1.1.1                                            
!
!
crypto ipsec transform-set RouterBset esp-des esp-md5-hmac                                                          
!
crypto map RouterBset 100 ipsec-isakmp                                      
set peer 10.1.1.1                  
set transform-set RouterBset                            
match address 101                  
!
!
!
!
interface Ethernet0                  
ip address 10.10.222.239 255.255.255.0                                      
no keepalive            
!
interface Serial0                
ip address 10.1.1.2 255.255.255.0
encapsulation ppp
no fair-queue
clockrate 64000
crypto map RouterBset
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.1.1
ip route 10.10.221.0 255.255.255.0 10.1.1.1
no ip http server
ip pim bidir-enable
!

у другого конфиг эдентичный этому....
в чем ошибка? и как проверить работу ipsec?