ipsecvpn隧道起来了，但是业务不通

没断电之前是正常的，但是昨天断电之后然后发现vpn不通了，我两边都重置过ike sa  和ipsec sa  然后隧道建立起来后一开始能ping通  4个包 然后就一直不通了

Advanced IPv4 ACL 3100, 2 rules,

ACL's step is 5

 rule 0 deny ip source 192.168.10.0 0.0.0.255 destination 172.16.10.0 0.0.0.255

 rule 1 permit ip (4 times matched)

Advanced IPv4 ACL 3400, 1 rule,

ACL's step is 5

 rule 0 permit ip source 192.168.10.0 0.0.0.255 destination 172.16.10.0 0.0.0.255 (3731 times matched)

这是总部的NAT穿越和兴趣流，分部也是互为镜像写的

总部是多出口 然后也写了对端的明细路由

#

 ip route-static 0.0.0.0 0 183.6.73.1 preference 70

 ip route-static 0.0.0.0 0 Dialer0

 ip route-static 0.0.0.0 0 Dialer1

 ip route-static 172.16.0.0 16 192.168.55.2

 ip route-static 172.16.10.0 24 183.6.73.1

本端是业务段192.168.10.0  对端是172.16.10.0

ipsec的各种模板提议都是一样的参数，调用也正常

[F]dis ipsec sa

-------------------------------

Interface: GigabitEthernet1/0/1

-------------------------------

  -----------------------------

  IPsec policy: GE1/0/1

  Sequence number: 1

  Mode: Template

  -----------------------------

    Tunnel id: 0

    Encapsulation mode: tunnel

    Perfect Forward Secrecy: 

    Inside VPN: 

    Extended Sequence Numbers enable: N

    Traffic Flow Confidentiality enable: N

    Transmitting entity: Responder

    Path MTU: 1420

    Tunnel:

        local  address: 183.6.73.8

        remote address: 116.226.33.57

    Flow:

        sour addr: 192.168.10.0/255.255.255.0  port: 0  protocol: ip

        dest addr: 172.16.10.0/255.255.255.0  port: 0  protocol: ip

    [Inbound ESP SAs]

      SPI: 148339295 (0x08d77a5f)

      Connection ID: 141733920769

      Transform set: ESP-ENCRYPT-AES-CBC-128 ESP-AUTH-SHA1

      SA duration (kilobytes/sec): 1843200/3600

      SA remaining duration (kilobytes/sec): 1843139/2463

      Max received sequence-number: 352

      Anti-replay check enable: Y

      Anti-replay window size: 64

      UDP encapsulation used for NAT traversal: Y

      Status: Active

    [Outbound ESP SAs]

      SPI: 874968513 (0x3426f5c1)

      Connection ID: 141733920768

      Transform set: ESP-ENCRYPT-AES-CBC-128 ESP-AUTH-SHA1

      SA duration (kilobytes/sec): 1843200/3600

      SA remaining duration (kilobytes/sec): 1843132/2463

      Max sent sequence-number: 323

      UDP encapsulation used for NAT traversal: Y

      Status: Active

[F]dis ike sa

    Connection-ID   Remote                Flag         DOI    

------------------------------------------------------------------

    22              116.226.33.57/4500    RD           IPsec  

    11              116.226.33.57/4500    RD|RL        IPsec  

Flags:

RD--READY RL--REPLACED FD-FADING RK-REKEY