MajoR

(config)> show crypto map crypto_map, name = NAME: config: remote_peer: X.X.X.X enabled: yes crypto_ipsec_profile_name: NAME mode: tunnel status: primary_peer: true phase1: name: NAME unique_id: 7 ike_state: ESTABLISHED establish_time: 1703703886 rekey_time: 1703707459 reauth_time: 0 local_addr: X.X.X.X remote_addr: X.X.X.X ike_version: 1 local_spi: 43ca6407325cd286 remote_spi: eafd36a4278464ad local_init: no ike_cypher: aes-cbc-128 ike_hmac: sha1 ike_dh_group: 14 phase2_sa_list: phase2_sa, index = 0: unique_id: 4 request_id: 1 sa_state: INSTALLED mode: TUNNEL protocol: ESP encapsulation: no local_spi: c210adf4 remote_spi: c0e23e49 ipsec_cypher: esp-3des ipsec_hmac: esp-sha1-hmac ipsec_dh_group: in_bytes: 981400 in_packets: 1813 in_time: 1703704750 out_bytes: 161331 out_packets: 1396 out_time: 1703704751 rekey_time: 1703707435 local_ts: 10.1.20.0/24 remote_ts: 10.4.0.0/24 phase2_sa, index = 1: unique_id: 5 request_id: 2 sa_state: INSTALLED mode: TUNNEL protocol: ESP encapsulation: no local_spi: c54516a7 remote_spi: cbfc8e88 ipsec_cypher: esp-3des ipsec_hmac: esp-sha1-hmac ipsec_dh_group: in_bytes: 0 in_packets: 0 in_time: 0 out_bytes: 0 out_packets: 0 out_time: 0 rekey_time: 1703707431 local_ts: 10.1.20.0/24 remote_ts: 10.2.1.0/24 phase2_sa, index = 2: unique_id: 6 request_id: 3 sa_state: INSTALLED mode: TUNNEL protocol: ESP encapsulation: no local_spi: c9fcfd9e remote_spi: cd9a16cc ipsec_cypher: esp-3des ipsec_hmac: esp-sha1-hmac ipsec_dh_group: in_bytes: 0 in_packets: 0 in_time: 0 out_bytes: 0 out_packets: 0 out_time: 0 rekey_time: 1703707437 local_ts: 10.1.20.0/24 remote_ts: 10.2.2.0/24 phase2_sa, index = 3: unique_id: 7 request_id: 4 sa_state: INSTALLED mode: TUNNEL protocol: ESP encapsulation: no local_spi: cb612c76 remote_spi: c1b0b068 ipsec_cypher: esp-3des ipsec_hmac: esp-sha1-hmac ipsec_dh_group: in_bytes: 0 in_packets: 0 in_time: 0 out_bytes: 0 out_packets: 0 out_time: 0 rekey_time: 1703707436 local_ts: 10.1.20.0/24 remote_ts: 10.2.4.0/24 phase2_sa, index = 4: unique_id: 8 request_id: 5 sa_state: INSTALLED mode: TUNNEL protocol: ESP encapsulation: no local_spi: c9038fe3 remote_spi: cdca499d ipsec_cypher: esp-3des ipsec_hmac: esp-sha1-hmac ipsec_dh_group: in_bytes: 0 in_packets: 0 in_time: 0 out_bytes: 0 out_packets: 0 out_time: 0 rekey_time: 1703707431 local_ts: 10.1.20.0/24 remote_ts: 10.2.7.0/24 phase2_sa, index = 5: unique_id: 9 request_id: 6 sa_state: INSTALLED mode: TUNNEL protocol: ESP encapsulation: no local_spi: c627d595 remote_spi: c2b460ad ipsec_cypher: esp-3des ipsec_hmac: esp-sha1-hmac ipsec_dh_group: in_bytes: 240 in_packets: 4 in_time: 1703704123 out_bytes: 240 out_packets: 4 out_time: 1703704123 rekey_time: 1703707445 local_ts: 10.1.20.0/24 remote_ts: 10.2.8.0/24 phase2_sa, index = 6: unique_id: 10 request_id: 7 sa_state: INSTALLED mode: TUNNEL protocol: ESP encapsulation: no local_spi: c4f3665d remote_spi: cac9e4a1 ipsec_cypher: esp-3des ipsec_hmac: esp-sha1-hmac ipsec_dh_group: in_bytes: 1466876 in_packets: 1579 in_time: 1703704750 out_bytes: 207930 out_packets: 768 out_time: 1703704750 rekey_time: 1703707436 local_ts: 10.1.20.0/24 remote_ts: 10.1.40.0/24 state: PHASE2_ESTABLISHED

Предложенная схема рабочая, но комментарий дал в той теме.

Всё равно больше 7-ми сетей не работает. Но перевод в "активный режим" помог.