防火墙IPSec隧道显示已建立，但无法ping通

af1 acl advanced name IPsec_▒ܲ▒vpn_IPv4_1 rule 0 permit ip source 192.168.20.0 0.0.0.255 destination 172.18.10.0 0.0.0.255 rule 1 permit ip source 192.168.10.0 0.0.0.255 destination 172.18.10.0 0.0.0.255 # domain system # aaa session-limit ftp 16 aaa session-limit telnet 16 aaa session-limit ssh 16 domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$X2ow88t/NjcLWIYf$4wQMHTyPpxxGch9wAR+yTkNHk5wjuohPARV1tRQivz1SRKu1hfkUJM8zIsKbUQZBJCc7twvQubpPZTTaECGNbg== service-type telnet terminal http https authorization-attribute user-role level-3 authorization-attribute user-role network-admin authorization-attribute user-role network-operator # ipsec transform-set ▒ܲ▒vpn_IPv4_1 esp encryption-algorithm aes-cbc-256 esp authentication-algorithm sha512 pfs dh-group24 # ipsec policy ▒ܲ▒vpn 1 isakmp transform-set ▒ܲ▒vpn_IPv4_1 security acl name IPsec_▒ܲ▒vpn_IPv4_1 local-address 221.237.65.126 remote-address 125.71.220.24 ike-profile ▒ܲ▒vpn_IPv4_1 sa trigger-mode auto # ike profile ▒ܲ▒vpn_IPv4_1 keychain ▒ܲ▒vpn_IPv4_1 exchange-mode aggressive local-identity address 221.237.65.126 match remote identity address 125.71.220.24 255.255.255.255 match local address GigabitEthernet1/0/4 proposal 1 # ike proposal 1 encryption-algorithm aes-cbc-256 dh group24 authentication-algorithm sha256 # ike keychain ▒ܲ▒vpn_IPv4_1 match local address GigabitEthernet1/0/4 pre-shared-key address 125.71.220.24 255.255.255.255 key cipher $c$3$7YxCmgLDF111bEMlgwP9SCNSgdhBTUAw5g== # ip http enable ip https enable # security-policy ip rule 0 name PolicyV4_0 action pass source-zone Trust destination-zone Untrust rule 2 name PolicyV4_2 action pass source-zone Trust destination-zone Trust destination-zone Management source-ip-host 192.168.10.1 rule 3 name PolicyV4_3 action pass source-zone Untrust destination-zone Trust source-ip-host 172.18.10.1 destination-ip-host 192.168.10.1 destination-ip-host 192.168.20.1 # af2 interface GigabitEthernet1/0/0 port link-mode route combo enable copper ip address 125.71.220.24 255.255.255.0 nat server protocol tcp global current-interface 8080 inside 172.18.251.1 80 rule oaӳ▒▒ ipsec apply policy ▒▒▒▒vpn # acl advanced name IPsec_▒▒▒▒vpn_IPv4_1 rule 0 permit ip source 172.18.10.0 0.0.0.255 destination 192.168.20.0 0.0.0.255 rule 1 permit ip source 172.18.10.0 0.0.0.255 destination 192.168.10.0 0.0.0.255 # domain system # aaa session-limit ftp 16 aaa session-limit telnet 16 aaa session-limit ssh 16 domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$tQbcmw8/Fcw+7Rpr$Pixe6MkgVcktLwOnVyo1Xago+EllB69IoT0PPwC5Dy/TOfSHCLyw/TgZZ0+3+vMGe302HgWvKX8gqZSa23Z7iw== service-type telnet terminal http https authorization-attribute user-role level-3 authorization-attribute user-role network-admin authorization-attribute user-role network-operator # ipsec transform-set ▒▒▒▒vpn_IPv4_1 esp encryption-algorithm aes-cbc-256 esp authentication-algorithm sha512 pfs dh-group24 # ipsec policy ▒▒▒▒vpn 1 isakmp transform-set ▒▒▒▒vpn_IPv4_1 security acl name IPsec_▒▒▒▒vpn_IPv4_1 local-address 125.71.220.24 remote-address 221.237.65.126 ike-profile ▒▒▒▒vpn_IPv4_1 sa trigger-mode auto # ike profile ▒▒▒▒vpn_IPv4_1 keychain ▒▒▒▒vpn_IPv4_1 exchange-mode aggressive local-identity address 125.71.220.24 match remote identity address 221.237.65.126 255.255.255.255 match local address GigabitEthernet1/0/0 proposal 1 # ike proposal 1 encryption-algorithm aes-cbc-256 dh group24 authentication-algorithm sha256 # ike keychain ▒▒▒▒vpn_IPv4_1 match local address GigabitEthernet1/0/0 pre-shared-key address 221.237.65.126 255.255.255.255 key cipher $c$3$jU3VRfMTdOvHpy6i+m6C/xE2I6RO1OigAA== # ip http enable ip https enable # security-policy ip rule 0 name PolicyV4_0 action pass source-zone Trust destination-zone Untrust rule 2 name PolicyV4_2 action pass source-zone Trust destination-zone Management source-ip-host 172.18.10.1 rule 3 name PolicyV4_3 action pass source-zone Untrust destination-zone Trust source-ip-host 192.168.10.1 source-ip-host 192.168.20.1 destination-ip-host 172.18.10.1 #

太乱了，发个txt文本吧