3) Синтаксис команды crypto ipsec transform-set
http://www.cisco.com/en/US/docs/ios/...html#wp1057372
На этапе настройки часто отключают шифрацию вовсе.
Это будет вот так
crypto ipsec transform-set ESP-NULL esp-null
crypto map SDM_CMAP_1 1 ipsec-isakmp
description Tunnel tooffice
set peer office ip
set security-association lifetime kilobytes 10000
set security-association idle-time 3600
set transform-set ESP-NULL
match address 102
2) Попробуйте оставить просто 3DES
crypto ipsec transform-set ESP-3DES esp-3des
crypto map SDM_CMAP_1 1 ipsec-isakmp
description Tunnel tooffice
set peer office ip
set security-association lifetime kilobytes 10000
set security-association idle-time 3600
set transform-set ESP-3DES
match address 102
