Problème avec Mon VPN Site à Site

[Rajivhost]

Bonjour,
J’essaie d’établir un VPN Site to Site avec deux Routeurs Cisco 1841. Les deux Nat Correctement pour sortir sur Internet mais je n'arrive pas à joindre l'autre extrémité en ping depuis le LAN du site A.

Voici les conf des deux routeurs. J'ai vraiment besoin d'une solution, merci d'avance.

Site A:

Code :

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
RTR-BZV#sh run
Building configuration...

Current configuration : 1812 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname RTR-BZV
!
boot-start-marker
boot-end-marker
!
enable password 
!
no aaa new-model
!
resource policy
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
ip cef
!
!
!
!
!
!
!
!
username admin privilege 15 password 0 
!
!
!
crypto isakmp policy 10
 encr aes 256
 authentication pre-share
crypto isakmp key testkey address 216.226.67.98
!
!
crypto ipsec transform-set aes-sha-transform esp-aes 256 esp-sha-hmac
!
crypto map aesmap 10 ipsec-isakmp
 set peer 216.226.67.98
 set transform-set aes-sha-transform
 match address acl_vpn
!
!
!
interface FastEthernet0/0
 description *** Vers Internet ***
 ip address 216.226.66.82 255.255.255.248
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 crypto map aesmap
 crypto ipsec df-bit clear
!
interface FastEthernet0/1
 description *** Vers LAN ***
 ip address 10.10.10.100 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
router eigrp 1
 network 216.226.66.0
 auto-summary
!
ip classless
ip route 0.0.0.0 0.0.0.0 216.226.66.81
!
no ip http server
no ip http secure-server
ip nat inside source list acl_nat interface FastEthernet0/0 overload
!
ip access-list extended acl_nat
 permit ip 10.10.10.0 0.0.0.255 any
 deny   ip 10.10.10.0 0.0.0.255 10.10.9.0 0.0.0.255
ip access-list extended acl_vpn
 permit ip 10.10.10.0 0.0.0.255 10.10.9.0 0.0.0.255
!
access-list 101 permit ip 10.10.10.0 0.0.0.255 any
access-list 102 permit udp host 216.226.67.98 any eq isakmp
access-list 102 permit esp host 216.226.67.98 any
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
 password 
 login
!
scheduler allocate 20000 1000
end

Site B:

Code :

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
RTR-PNR#sh run
Building configuration...

Current configuration : 1569 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname RTR-PNR
!
boot-start-marker
boot-end-marker
!
enable password 
!
no aaa new-model
!
resource policy
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
ip cef
!
!
!
!
!
!
!
!
!
!
!
crypto isakmp policy 10
 encr aes 256
 authentication pre-share
crypto isakmp key testkey address 216.226.66.82
!
!
crypto ipsec transform-set aes-sha-transform esp-aes 256 esp-sha-hmac
!
crypto map aesmap 10 ipsec-isakmp
 set peer 216.226.66.82
 set transform-set aes-sha-transform
 match address acl_vpn
!
!
!
interface FastEthernet0/0
 description *** Vers Internet ***
 ip address 216.226.67.98 255.255.255.248
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 crypto map aesmap
 crypto ipsec df-bit clear
!
interface FastEthernet0/1
 description *** Vers LAN ***
 ip address 10.10.9.100 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
router eigrp 1
 network 216.226.67.0
 auto-summary
!
ip classless
ip route 0.0.0.0 0.0.0.0 216.226.67.97
!
no ip http server
no ip http secure-server
ip nat inside source list acl_nat interface FastEthernet0/0 overload
!
ip access-list extended acl_nat
 permit ip 10.10.9.0 0.0.0.255 any
ip access-list extended acl_vpn
 permit ip 10.10.9.0 0.0.0.255 10.10.10.0 0.0.0.255
!
access-list 102 permit esp host 216.226.66.82 any
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
 password 
 login
!
end