>Ну конфиги что ли покажи...
A.A.A.A - филиал
B.B.B.B - циска
======================================
spdadd 172.16.52.0/24 172.16.0.0/20 any -P out
ipsec esp/tunnel/A.A.A.A-B.B.B.B/require;
spdadd 172.16.0.0/20 172.16.52.0/24 any -P in
ipsec esp/tunnel/B.B.B.B-A.A.A.A/require;
======================================
path include "/usr/local/etc/racoon" ;
path pre_shared_key "/usr/local/etc/racoon/psk.txt" ;
log notify;
padding
{
maximum_length 20;
randomize off;
strict_check off;
exclusive_tail off;
}
listen
{
isakmp A.A.A.A [500];
}
timer
{
counter 5;
interval 20 sec;
persend 1;
phase1 30 sec;
phase2 15 sec;
}
remote anonymous
{
exchange_mode main,aggressive;
doi ipsec_doi;
situation identity_only;
nonce_size 16;
lifetime time 24 hour;
initial_contact on;
support_proxyi on;
proposal_check obey;
proposal {
encryption_algorithm aes;
hash_algorithm md5;
authentication_method pre_shared_key ;
dh_group 2 ;
}
}
sainfo anonymous
{
pfs_group 2;
lifetime time 24 hour;
encryption_algorithm aes ;
authentication_algorithm hmac_md5;
compression_algorithm deflate ;
}
======================================
em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=b<RXCSUM,TXCSUM,VLAN_MTU>
inet 172.16.52.1 netmask 0xffffff00 broadcast 172.16.52.255
ether xx:xx:xx:xx:xx:xx
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=8<VLAN_MTU>
inet A.A.A.A netmask 0xfffffffc broadcast A.A.A.3
ether xx:xx:xx:xx:xx:xx
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33208
pfsync0: flags=0<> mtu 2020
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet 127.0.0.1 netmask 0xff000000
gif0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1280
tunnel inet A.A.A.A --> B.B.B.B
inet 172.16.52.1 --> 10.254.0.4 netmask 0xffffffff
======================================
Вариант для распечатки
OpenNET: Виртуальная конференция (Public)
(??) on 13-Июн-06, 11:49 
