深信服的vpn防火墙和H3C-F1000-AK135做ipsec vpn失败问题

  在防火墙上看到有连接失败的日志 

 <JTsanyiyuanCORE_1>ping -a 172.75.76.252 10.20.192.11 PING 10.20.192.11: 56 data bytes, press CTRL_C to break*Apr 26 10:01:54:123 2022 JTSYY IPSEC/7/EVENT: -COntext=1; Can't find block-flow node. *Apr 26 10:01:54:123 2022 JTSYY IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 1, SP Convert-Seq = 65536. *Apr 26 10:01:54:123 2022 JTSYY IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Apr 26 10:01:54:123 2022 JTSYY IPSEC/7/EVENT: -COntext=1; Sent SA-Acquire message : SP ID = 1 *Apr 26 10:01:54:124 2022 JTSYY IPSEC/7/EVENT: -COntext=1; Received negotiatiate SA message from IPsec kernel. *Apr 26 10:01:54:124 2022 JTSYY IPSEC/7/EVENT: -COntext=1; Got SA time-based soft lifetime settings when filling Sp data. Configured soft lifetime buffer : 0 seconds. Configured global soft lifetime buffer : 0 seconds. %Apr 26 10:01:54:227 2022 JTSYY SYSLOG/5/LOGFILE_USAGEHIGH: -COntext=1; The usage of log-file flash:/logfile/atk_single.log reaches 80%. Request time out*Apr 26 10:01:56:349 2022 JTSYY IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Apr 26 10:01:56:349 2022 JTSYY IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 1, SP Convert-Seq = 65536. *Apr 26 10:01:56:349 2022 JTSYY IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. Request time out*Apr 26 10:01:58:574 2022 JTSYY IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Apr 26 10:01:58:574 2022 JTSYY IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 1, SP Convert-Seq = 65536. *Apr 26 10:01:58:574 2022 JTSYY IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. Request time out*Apr 26 10:02:00:799 2022 JTSYY IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Apr 26 10:02:00:799 2022 JTSYY IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 1, SP Convert-Seq = 65536. *Apr 26 10:02:00:799 2022 JTSYY IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. Request time out*Apr 26 10:02:03:023 2022 JTSYY IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Apr 26 10:02:03:023 2022 JTSYY IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 1, SP Convert-Seq = 65536. *Apr 26 10:02:03:023 2022 JTSYY IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. Request time out --- 10.20.192.11 ping statistics --- 5 packet(s) transmitted 0 packet(s) received 100.00% packet loss

深信服设备配置如下