gdoi юзает кто-нить?

[slim]

есть вопросик..

[slim]

почему мемберы не юзают рекей, интересно:

на кей сервере усе сконфигурено, вроде
ks1#sh cry gdoi
GROUP INFORMATION

Group Name : vpn (Multicast)
Group Identity : 10
Group Members : 0
IPSec SA Direction : Both
Active Group Server : Local
Redundancy : Configured
Local Address : 172.17.0.1
Local Priority : 10
Local KS Status : Alive
Local KS Role : Secondary
Group Rekey Lifetime : 300 secs
Rekey Retransmit Period : 10 secs
Rekey Retransmit Attempts: 3

IPSec SA Number : 10
IPSec SA Rekey Lifetime: 3600 secs
Profile Name : vpn
Replay method : Count Based
Replay Window Size : 64
ACL Configured : access-list 112

Group Server list : Local

а клиент, собака, не видит.. :(
gm3#sh cry gdoi
GROUP INFORMATION

Group Name : vpn
Group Identity : 10
Rekeys received : 0
IPSec SA Direction : Both
Active Group Server : 172.17.0.1
Group Server list : 172.17.0.1

GM Reregisters in : 0 secs
Rekey Received : never


Rekeys received
Cumulative : 0
After registration : 0

ACL Downloaded From KS 172.17.0.1:
access-list permit ip 10.255.255.0 0.0.0.255 10.255.255.0 0.0.0.255

TEK POLICY:
Vlan1:

[slim]

отбой..
просветление наступило :)

[Sir Arthur]

чего было то?

[slim]

чего было то?

темные электрические силы :)

в конфиге накосячил)