Здравствуйте!

Не получается настроить доступ cisco vpn client version 5.0.007.0240 к маршрутизатору  cisco 2821.
При попытке соединения VPN клиентом дело доходит до Negotiating Security Policy и на этом дело останавливается - not connected.

Конфиг:

aaa new-model
!
!
aaa authentication login uzerlizt local
aaa authorization network siz-group local
!
aaa session-id common
!
username vpnuzer password 7 14464058
!
crypto isakmp policy 3
encr 3des
authentication pre-share
group 2
!
!
crypto isakmp client configuration group my_group
key my_key
dns 10.2.1.10
domain www.ru
pool ukpool
!
!
crypto ipsec transform-set myset esp-3des esp-sha-hmac
!
crypto dynamic-map dynmap 1
set transform-set myset
reverse-route
!
!
crypto map clientmap client authentication list uzerlizt
crypto map clientmap isakmp authorization list siz-group
crypto map clientmap client configuration address respond
crypto map clientmap 1 ipsec-isakmp dynamic dynmap
!
!
interface GigabitEthernet0/0.100
encapsulation dot1Q 100
ip address 217.20.80.41 255.255.255.248
ip nat outside
ip virtual-reassembly
no snmp trap link-status
crypto map clientmap
!
!
ip local pool ukpool 10.2.1.250 10.200.1.254