模拟器支持GRE OVER IPSEC + Radius认证配置吗

模拟器支持GRE OVER IPSEC + Radius认证配置吗？ 使用了模拟器自带的Radius 服务器 配置后 ike sa 协商时flag 显示unknown ，不使用radius状态正常，请求指导一下，配置是不是正常，还是模拟器自带的radius服务器有问题：

#

radius scheme rd

 primary authentication 192.168.56.102 key cipher $c$3$op42b0K52Q04g7U3ExN/9EPM08yyMBojvpwnqQ==

 primary accounting 192.168.56.102 key cipher $c$3$fySuMC1e6no5WluAFmZv7Fro9GzTqvFCz6040A==

 user-name-format without-domain

#

domain system

 authentication ike radius-scheme rd local

 authorization ike radius-scheme rd local

#

 domain default enable system

#

local-user whfz class network

 password cipher $c$3$wGXxbbW8dlj+Pif/Ik5gdgIo5NMV0gPg7kobVw==

 service-type ike

 authorization-attribute user-role network-operator

#

ipsec transform-set tranfz

 encapsulation-mode transport

 esp encryption-algorithm 3des-cbc 

 esp authentication-algorithm md5 

#

ipsec policy bjzb 1 isakmp

 transform-set tranfz 

 security acl 3000 

 remote-address 100.2.2.1

 ike-profile shfz

 sa trigger-mode auto

#

ipsec policy bjzb 2 isakmp

 transform-set tranfz 

 security acl 3001 

 remote-address whfz

 ike-profile whfz

 sa trigger-mode auto

#

 ike identity fqdn bjzb

#

ike profile shfz

 keychain shfz

 local-identity address 100.1.1.1

 match remote identity address 100.2.2.1 255.255.255.0

 proposal 1 

#

ike profile whfz

 keychain whfz

 dpd interval 10 on-demand

 exchange-mode aggressive

 local-identity fqdn bjzb

 match remote identity fqdn whfz

 proposal 1 

 client-authentication xauth

#

ike proposal 1

 encryption-algorithm 3des-cbc

 authentication-algorithm md5

#

ike keychain shfz

 pre-shared-key address 100.2.2.1 255.255.255.255 key cipher $c$3$dIIkVJ3OVn/y51BMvCWvrDjwL4GDDTyoRoqAqg==

#

ike keychain whfz

 pre-shared-key hostname whfz key cipher $c$3$haX6gboNe29WSGvYzVTzrlsOHpxXoTT00frs1g==

#

-------------------------------------------------------------------------------------------------------------

<bjzb>disp ike sa

    Connection-ID   Local               Remote              Flag      DOI    

-------------------------------------------------------------------------

    1               100.1.1.1           100.2.2.1           RD        IPsec  

    14              100.1.1.1           100.3.3.1           Unknown   IPsec  

Flags:

RD--READY RL--REPLACED FD-FADING RK-REKEY