здравствуйте. настраивал dfl-210 вот по этому мануалу
http://www.dlink.ru/ru/faq/92/927.html а di-804 вот по этому
http://www.dlink.ru/ru/faq/92/520.html проблема в том что ipsec держится 90 секунд и падает потом вновь востанавливается и опять по новой. Привожу лог di-804
Sunday August 23, 2009 13:55:07 IPSec tunnel keep alive : peer IP 192.168.1.3
Sunday August 23, 2009 13:55:07 [192.168.0.0|10.188.14.168]-->[10.188.148.3|192.168.1.0]
Sunday August 23, 2009 13:55:23 IPSec tunnel keep alive : peer IP 192.168.1.3
Sunday August 23, 2009 13:55:23 [192.168.0.0|10.188.14.168]-->[10.188.148.3|192.168.1.0]
Sunday August 23, 2009 13:55:39 IPSec tunnel keep alive : peer IP 192.168.1.3
Sunday August 23, 2009 13:55:39 [192.168.0.0|10.188.14.168]-->[10.188.148.3|192.168.1.0]
Sunday August 23, 2009 13:55:55 IPSec tunnel keep alive : peer IP 192.168.1.3
Sunday August 23, 2009 13:55:55 [192.168.0.0|10.188.14.168]-->[10.188.148.3|192.168.1.0]
Sunday August 23, 2009 13:56:06 Warming : delete IPSec tunnel because remote subnet no response
Sunday August 23, 2009 13:56:06 Send IKE (INFO) : delete [192.168.0.0|10.188.14.168]-->[10.188.148.3|192.168.1.0] phase 2
Sunday August 23, 2009 13:56:06 IKE phase2 (IPSec SA) remove : 192.168.0.0 <-> 192.168.1.0
Sunday August 23, 2009 13:56:06 inbound SPI = 0x3c0619d0, outbound SPI = 0xb7ce2952
Sunday August 23, 2009 13:56:06 Send IKE (INFO) : delete 10.188.14.168 -> 10.188.148.3 phase 1
Sunday August 23, 2009 13:56:06 IKE phase1 (ISAKMP SA) remove : 10.188.14.168 <-> 10.188.148.3
Sunday August 23, 2009 13:56:06 Send IKE M1(INIT) : 10.188.14.168 --> 10.188.148.3
Sunday August 23, 2009 13:56:06 Receive IKE M2(RESP) : 10.188.148.3 --> 10.188.14.168
Sunday August 23, 2009 13:56:06 Try to match with ENC:3DES AUTH:PSK HASH:MD5 Group:Group2
Sunday August 23, 2009 13:56:06 Send IKE M3(KEYINIT) : 10.188.14.168 --> 10.188.148.3
Sunday August 23, 2009 13:56:06 Receive IKE M4(KEYRESP) : 10.188.148.3 --> 10.188.14.168
Sunday August 23, 2009 13:56:07 Send IKE M5(IDINIT) : 10.188.14.168 --> 10.188.148.3
Sunday August 23, 2009 13:56:06 Send IKE M5(IDINIT) : 10.188.14.168 --> 10.188.148.3
Sunday August 23, 2009 13:56:06 Receive IKE M6(IDRESP) : 10.188.148.3 --> 10.188.14.168
Sunday August 23, 2009 13:56:06 IKE Phase1 (ISAKMP SA) established : 10.188.148.3 <-> 10.188.14.168
Sunday August 23, 2009 13:56:06 Send IKE Q1(QINIT) : 192.168.0.0 --> 192.168.1.0
Sunday August 23, 2009 13:56:06 Receive IKE Q2(QRESP) : [192.168.1.0|10.188.148.3]-->[10.188.14.168|192.168.0.0]
Sunday August 23, 2009 13:56:06 Try to match ESP with MODE:Tunnel PROTOCAL:ESP-3DES AUTH:MD5 HASH:Others PFS(Group):NONE
Sunday August 23, 2009 13:56:06 Send IKE Q3(QHASH) : 192.168.0.0 --> 192.168.1.0
Sunday August 23, 2009 13:56:06 IKE Phase2 (IPSEC SA) established : [192.168.1.0|10.188.148.3]<->[10.188.14.168|192.168.0.0]
Sunday August 23, 2009 13:56:06 inbound SPI = 0x3e0660db, outbound SPI = 0x6749f038
Sunday August 23, 2009 13:56:12 Receive IKE INFO : 10.188.148.3 --> 10.188.14.168
Sunday August 23, 2009 13:56:22 IPSec tunnel keep alive : peer IP 192.168.1.3
Sunday August 23, 2009 13:56:22 [192.168.0.0|10.188.14.168]-->[10.188.148.3|192.168.1.0]
Sunday August 23, 2009 13:56:26 Send IKE (INFO) : delete [192.168.0.0|10.188.14.168]-->[10.188.148.3|192.168.1.0] phase 2
Sunday August 23, 2009 13:56:26 IKE phase2 (IPSec SA) remove : 192.168.0.0 <-> 192.168.1.0
Sunday August 23, 2009 13:56:26 inbound SPI = 0x3e0660db, outbound SPI = 0x6749f038
Sunday August 23, 2009 13:56:26 Send IKE (INFO) : delete 10.188.14.168 -> 10.188.148.3 phase 1
Sunday August 23, 2009 13:56:26 IKE phase1 (ISAKMP SA) remove : 10.188.14.168 <-> 10.188.148.3