вот кусок моего рабочего конфига, который может помочь разобраться.l2tp-class corbina
!
pseudowire-class class1
encapsulation l2tpv2
protocol l2tpv2 corbina
ip local interface FastEthernet4
!
interface FastEthernet4
ip address dhcp
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Virtual-PPP1
ip address negotiated
ip access-group FIREWALL in
ip mtu 1460
ip nat outside
ip virtual-reassembly
ip tcp adjust-mss 1420
no peer neighbor-route
ppp chap hostname *
ppp chap password 7 *
no cdp enable
pseudowire 85.21.0.255 10 pw-class class1
!
ip nat inside source list LAN interface FastEthernet4 overload
ip nat inside source list WAN interface Virtual-PPP1 overload
ip route 0.0.0.0 0.0.0.0 Virtual-PPP1
ip route 10.0.0.0 255.0.0.0 dhcp
ip route 83.102.146.96 255.255.255.224 dhcp
ip route 85.21.29.242 255.255.255.255 dhcp
ip route 85.21.79.0 255.255.255.0 dhcp
ip route 85.21.90.0 255.255.255.0 dhcp
ip route 195.14.50.16 255.255.255.255 dhcp
ip route 85.21.17.253 255.255.255.255 dhcp
ip route 89.179.135.67 255.255.255.255 dhcp
ip route 195.14.50.21 255.255.255.255 dhcp
ip route 195.14.50.1 255.255.255.255 dhcp
ip route 85.21.0.251 255.255.255.255 dhcp
ip route 85.21.0.253 255.255.255.255 dhcp
ip route 172.16.16.0 255.255.255.0 dhcp
ip route 85.21.108.19 255.255.255.255 dhcp
ip route 195.14.50.26 255.255.255.255 dhcp
ip route 85.21.72.83 255.255.255.255 dhcp
ip route 85.21.0.255 255.255.255.255 dhcp
!
ip access-list extended FIREWALL
deny tcp any eq 139 any
deny udp any eq netbios-ns any eq netbios-ns
deny udp any eq netbios-dgm any eq netbios-dgm
deny udp any eq netbios-ss any eq netbios-ss
deny udp any any range snmp snmptrap
deny tcp any any eq 3128
deny ip 10.0.0.0 0.0.255.255 any
deny ip 127.0.0.0 0.0.0.255 any
deny udp any any range 130 140
deny tcp any any range 130 140
deny tcp any any eq 8080
permit ip any any
permit udp any any
permit gre any any
permit tcp any any
permit icmp any any
permit pcp any any
permit esp any any
permit ipinip any any
permit nos any any
ip access-list extended LAN
permit ip 192.168.1.0 0.0.0.255 10.0.0.0 0.255.255.255
permit ip 192.168.1.0 0.0.0.255 83.102.146.0 0.0.0.231
permit ip 192.168.1.0 0.0.0.255 host 85.21.29.242
permit ip 192.168.1.0 0.0.0.255 85.21.79.0 0.0.0.255
permit ip 192.168.1.0 0.0.0.255 85.21.90.0 0.0.0.255
permit ip 192.168.1.0 0.0.0.255 host 195.14.50.16
permit ip 192.168.1.0 0.0.0.255 host 195.14.50.26
ip access-list extended WAN
permit ip 192.168.1.0 0.0.0.255 any
!
и хотелось бы увидеть дебаг, что выводится при попытке установки соединения.
