Привет всем! Проблема, есть устройство DI-824VUP+, настроил соединение с провайдером интернет PPPoE, настрои IPSec тунель, тунель поднялся, но невижу ничего кроме WAN и LAN адреса роутера DI-824VUP+.
Что делать, куда смотреть?
Вот лог:
Wednesday November 12, 2008 15:57:26 Disassociated: Blocked access attempt from 195.34.239.225:59582 to UDP port 53
Wednesday November 12, 2008 15:57:28 Disassociated: Blocked access attempt from 195.34.239.225:30889 to UDP port 53
Wednesday November 12, 2008 15:57:30 Disassociated: Blocked access attempt from 195.34.239.225:58629 to UDP port 53
Wednesday November 12, 2008 15:57:38 Disassociated: Blocked access attempt from 195.34.239.225:5057 to UDP port 53
Wednesday November 12, 2008 15:57:47 Disassociated: Blocked access attempt from 77.88.22.6:5335 to UDP port 53
Wednesday November 12, 2008 15:58:07 Receive IKE M1(INIT) : 172.24.228.89 --> 195.34.239.230
Wednesday November 12, 2008 15:58:07 Try to match with ENC:3DES AUTH:PSK HASH:SHA1 Group:Group2
Wednesday November 12, 2008 15:58:07 Send IKE M2(RESP) : 195.34.239.230 --> 172.24.228.89
Wednesday November 12, 2008 15:58:07 Receive IKE M3(KEYINIT) : 172.24.228.89 --> 195.34.239.230
Wednesday November 12, 2008 15:58:07 Send IKE M4(KEYRESP) : 195.34.239.230 --> 172.24.228.89
Wednesday November 12, 2008 15:58:07 Receive IKE M5(IDINIT) : 172.24.228.89 --> 195.34.239.230
Wednesday November 12, 2008 15:58:07 Send IKE M6(IDRESP) : 195.34.239.230 --> 172.24.228.89
Wednesday November 12, 2008 15:58:07 IKE Phase1 (ISAKMP SA) established : 195.34.239.230 <-> 172.24.228.89
Wednesday November 12, 2008 15:58:07 Receive IKE Q1(QINIT) : [172.24.228.89]-->[195.34.239.230]
Wednesday November 12, 2008 15:58:07 SPD : add dynamic user [192.168.1.0]<->[192.168.207.12] OK
Wednesday November 12, 2008 15:58:07 Requested routing is [192.168.207.12|172.24.228.89]<->[195.34.239.230|192.168.1.0]
Wednesday November 12, 2008 15:58:07 Try to match ESP with MODE:Tunnel PROTOCAL:ESP-3DES AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday November 12, 2008 15:58:07 IKE Q1 : 192.168.207.12 -> 192.168.1.0 no pfs support
Wednesday November 12, 2008 15:58:07 Send IKE Q2(QRESP) : 192.168.1.0 --> 192.168.207.12
Wednesday November 12, 2008 15:58:07 Receive IKE Q3(QHASH) : [192.168.207.12|172.24.228.89]-->[195.34.239.230|192.168.1.0]
Wednesday November 12, 2008 15:58:07 Receive IKE Q3(QHASH) : [192.168.207.12|172.24.228.89]-->[195.34.239.230|192.168.1.0]
Wednesday November 12, 2008 15:58:07 IKE Phase2 (IPSEC SA) established : [192.168.207.12|172.24.228.89]<->[195.34.239.230|192.168.1.0]
Wednesday November 12, 2008 15:58:07 inbound SPI = 0x3700dded, outbound SPI = 0x4ad66b76
Wednesday November 12, 2008 15:58:32 Disassociated: Blocked access attempt from 195.34.239.225:4799 to UDP port 53
Wednesday November 12, 2008 15:58:35 Disassociated: Blocked access attempt from 195.34.239.225:47081 to UDP port 53
Wednesday November 12, 2008 15:58:38 Disassociated: Blocked access attempt from 195.34.239.225:60526 to UDP port 53
Wednesday November 12, 2008 15:58:45 Disassociated: Blocked access attempt from 195.34.239.225:6350 to UDP port 53
Wednesday November 12, 2008 15:58:57 Disassociated: Blocked access attempt from 89.179.102.6:52511 to UDP port 53
Wednesday November 12, 2008 15:58:58 Disassociated: Blocked access attempt from 89.179.102.6:56225 to UDP port 53
Wednesday November 12, 2008 15:58:58 Disassociated: Blocked access attempt from 89.179.102.6:40355 to UDP port 53
Wednesday November 12, 2008 15:58:58 Disassociated: Blocked access attempt from 89.179.102.6:1929 to UDP port 53
Wednesday November 12, 2008 15:58:58 Disassociated: Blocked access attempt from 89.179.102.6:20268 to UDP port 53
Wednesday November 12, 2008 15:58:58 Disassociated: Blocked access attempt from 89.179.102.6:52209 to UDP port 53
Wednesday November 12, 2008 15:58:58 Disassociated: Blocked access attempt from 89.179.102.6:34173 to UDP port 53
Wednesday November 12, 2008 15:58:58 Disassociated: Blocked access attempt from 89.179.102.6:48171 to UDP port 53
Wednesday November 12, 2008 15:58:58 Disassociated: Blocked access attempt from 89.179.102.6:33924 to UDP port 53
Wednesday November 12, 2008 15:58:58 Disassociated: Blocked access attempt from 89.179.102.6:59506 to UDP port 53
Wednesday November 12, 2008 15:58:58 Disassociated: Blocked access attempt from 89.179.102.6:29347 to UDP port 53
Wednesday November 12, 2008 15:58:58 Disassociated: Blocked access attempt from 89.179.102.6:5665 to UDP port 53
Wednesday November 12, 2008 15:58:58 Disassociated: Blocked access attempt from 195.34.239.225:52513 to UDP port 53

LAN IP DI-824VUP+ 192.168.1.2, до него ping проходит, дальше, до компьютеров локалки нет.

Приведите подробную настройку устройств. Находиться ли хоть одно из устройств за NAT (например за adsl модемом с поднятым NAT) Какие версии прошивок?

_________________
Сообщения в PM игнорируются, задавайте вопросы на форуме.

Станция Win XP находится за NAT, на устройство залил последнюю прошивку.
IP Win XP станции 192.168.207.12, IP WAN интерфейса ADSL модема172.24.228.89
IP WAN DI-824VUP+ 195.34.239.230, локальный IP 192.168.1.1

Win XP станцию настраивал по этому примеру http://www.dlink.ru/technical/faq_vpn_18.php

на устройстве с помощью мастера настроил Dynamic VPN
Tunnel Name DynTunnel
Dynamic VPN Enable
IPSec NAT Traversal Enable
Local Subnet 192.168.1.0
Local Netmask 255.255.255.0
Preshare Key
Extended Authentication нет
(xAUTH) Enable Server mode нет

IKE Proposal index мастер настрои автоматически
IPSec Proposal index мастер настрои автоматически

Отключите nat travestal windows XP его не поддерживает.

_________________
Сообщения в PM игнорируются, задавайте вопросы на форуме.

уже попробывал, ничего не дало, ситуация таже, что делать?