Исходное сообщение
"второй канал VPN" Отправлено Madja, 09-Июн-09 09:40
Воть run conf username admin password 7 0509071635495C0C12 archive log config   logging enable   notify syslog contenttype plaintext   hidekeys ! ! crypto isakmp policy 100 encr aes 192 hash md5 authentication pre-share group 2 crypto isakmp key bayterek09 address Алмата crypto isakmp key bayterek09 address Астана ! ! crypto ipsec transform-set PEERS esp-aes esp-md5-hmac mode transport ! crypto map IPSEC 300 ipsec-isakmp set peer Алмата set peer Астана set security-association idle-time 600 set transform-set PEERS set pfs group1 match address ACL_GRE ! ! ! ip ssh version 2 ! ! ! ! interface Loopback100 description -=Voice gateway=- ip address 10.10.111.1 255.255.255.255 h323-gateway voip interface h323-gateway voip h323-id vo-gw-Bay h323-gateway voip bind srcaddr 10.10.111.1 ! interface Tunnel1 ip address 1.1.1.1 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ip tcp adjust-mss 1360 tunnel source Байконур tunnel destination Астана ! interface Tunnel2 ip address 1.1.2.1 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ip tcp adjust-mss 1360 tunnel source Байконур tunnel destination Алмата ! interface FastEthernet0/0 no ip address no ip proxy-arp shutdown duplex full speed auto ! interface FastEthernet0/1 no ip address no ip proxy-arp ip virtual-reassembly shutdown   duplex full speed auto ! interface FastEthernet0/2/0 switchport access vlan 2 duplex full speed 100 ! interface FastEthernet0/2/1 shutdown ! interface FastEthernet0/2/2 shutdown ! interface FastEthernet0/2/3 shutdown ! interface ATM0/1/0 no ip address shutdown no atm ilmi-keepalive ! interface Serial0/3/0 ip address Байконур no ip redirects no ip unreachables no ip proxy-arp ip nat outside ip virtual-reassembly crypto map IPSEC ! interface Serial0/3/1 no ip address shutdown clock rate 2000000 ! interface Vlan1 no ip address shutdown ! interface Vlan2 ip address 10.10.11.1 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ip nat inside ip virtual-reassembly ip tcp adjust-mss 1360 ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 Serial0/3/0 ip route 10.0.1.0 255.255.255.0 10.10.11.2 ip route 10.0.3.0 255.255.255.0 1.1.2.2 ip route 10.10.21.0 255.255.255.0 10.10.11.2 ip route 10.10.112.1 255.255.255.255 1.1.1.2 ip route 10.10.113.1 255.255.255.255 1.1.2.2 ip route 192.168.1.0 255.255.255.0 10.10.11.2 ip route 192.168.2.0 255.255.255.0 1.1.1.2 ip route 192.168.3.21 255.255.255.255 1.1.2.2 ip route 192.168.3.101 255.255.255.255 1.1.2.2 ip route 192.168.11.0 255.255.255.0 10.10.11.2 ip route 192.168.12.0 255.255.255.0 1.1.1.2 ip route 192.168.13.0 255.255.255.0 1.1.2.2 ip route 192.168.21.0 255.255.255.0 10.10.11.2 ip route 192.168.22.0 255.255.255.0 1.1.1.2 ip route 192.168.23.0 255.255.255.0 1.1.2.2 no ip http server no ip http secure-server ! ! ip nat inside source list 101 interface Serial0/3/0 overload ! no cdp run Теперь к Serial0/3/1 подключится VPN провайдера и необходимо разбить поток