ping не проходит с VPN клиента на внешний ip, а также с Cisco на VPN клиента
VPN клиент подключаеться к Cisco без проблем.

VPNClient>ping 81.1.223.133
ciscoISG#ping 192.168.1.3

не пингует, а надо.

Вот конфигурация Cisco:

no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ciscoISG
!
boot-start-marker
boot bootldr bootflash:c7301-js-mz.124-23.bin
boot-end-marker
!
enable secret 5 $1$rHPp$HHWsjVyT4sHbDUD3Jxsgv0
enable password zxcvbn12
!
aaa new-model
!
!
aaa group server radius ISG-Samotlor
server 10.141.1.1 auth-port 1812 acct-port 1813
!
aaa authentication ppp Samotlor-AUTH group ISG-Samotlor
aaa authorization network Samotlor-AUTH group ISG-Samotlor
aaa accounting update newinfo periodic 5
aaa accounting network default start-stop group ISG-Samotlor
!
aaa session-id common
no ip routing
!
!
no ip cef
ip name-server 10.141.1.1
!
!
ip address-pool local
vpdn enable
!
vpdn-group 1
! Default L2TP VPDN group
! Default PPTP VPDN group
accept-dialin
  protocol any
  virtual-template 1
!
!
!
!
!
!
!
!
!
!
!
!
username admin password 0 zxcvbn12
!
!
!
!
bba-group pppoe global
virtual-template 1
!
!
interface Loopback0
description PPPoE users
ip address 192.168.1.1 255.255.255.0
ip nat inside
no ip virtual-reassembly
!
interface GigabitEthernet0/0
description PPTP clients
ip address 10.141.1.249 255.255.255.0
ip nat inside
ip virtual-reassembly
no ip route-cache
duplex auto
speed auto
media-type rj45
no negotiation auto
pppoe enable group global
no mop enabled
!
interface GigabitEthernet0/1
ip address 81.1.223.133 255.255.255.248
ip nat outside
no ip virtual-reassembly
no ip route-cache
duplex auto
speed auto
media-type rj45
no negotiation auto
!
interface GigabitEthernet0/2
no ip address
ip nat outside
no ip virtual-reassembly
no ip route-cache
duplex auto
speed auto
media-type rj45
no negotiation auto
!
interface Virtual-Template1
ip unnumbered Loopback0
ip access-group 2 in
ip nat inside
ip virtual-reassembly
peer default ip address pool PPPoE
ppp authentication pap chap Samotlor-AUTH
!
ip local pool PPPoE 192.168.1.2 192.168.1.254
ip forward-protocol nd
!
no ip http server
!
!
ip radius source-interface GigabitEthernet0/0
access-list 1 permit 10.141.1.0 0.0.0.255
access-list 2 permit 192.168.1.0 0.0.0.255
snmp-server community public RO
!
!
!
radius-server attribute 44 include-in-access-req
radius-server attribute 44 extend-with-addr
radius-server attribute 8 include-in-access-req
radius-server attribute 32 include-in-accounting-req
radius-server attribute 55 include-in-acct-req
radius-server attribute 31 mac format unformatted
radius-server host 10.141.1.1 auth-port 1812 acct-port 1813 key asdfgh12
radius-server vsa send cisco-nas-port
radius-server vsa send accounting
radius-server vsa send authentication
!
control-plane
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
password zxcvbn12
!
!
end