ESP报文用wireshark解密

用hcl搭建了ipsec隧道，A B路由之间跑esp报文

为了测试，用A PING B ，然后用wireshark抓到了esp报文

网上说可以利用wireshark来解析esp报文

甩wireshark官方说明***.***/ESP_Preferences

照着做了，但是没有达到预期效果

\

附A B 路由的配置

【A】

#配置ACL

acl advanced 3000

 rule 0 permit ip source 10.1.1.0 0.0.0.255 destination 10.1.4.0 0.0.0.255

#选择安全算法

ipsec transform-set 1

 esp encryption-algorithm des-cbc

 esp authentication-algorithm md5

#配置IKE

ike profile 1

 keychain 1

 match remote identity address 10.1.4.1 255.255.255.255

#

#

Ipsec policy mypolicy 2 manual

security acl 3000

transform-set 1

remote-address 10.1.4.1

sa spi outbound esp 12345

sa spi inbound esp 54321

sa string-key outbound esp simple abcdefg

sa string-key inbound esp simple gfedcba

quit

#

interface GigabitEthernet0/0

 port link-mode route

 combo enable copper

 ip address 10.1.1.1 255.255.255.0

 ipsec apply policy mypolicy  

#

ip route-static 0.0.0.0 0 10.1.1.2

#

【B】

#

acl advanced 3000

 rule 0 permit ip source 10.1.4.0 0.0.0.255 destination 10.1.1.0 0.0.0.255

#

ipsec transform-set 1

 esp encryption-algorithm des-cbc

 esp authentication-algorithm md5

#

ike profile 1

 keychain 1

 match remote identity address 10.1.1.1 255.255.255.255

#

Ipsec policy mypolicy 2 manual

security acl 3000

transform-set 1

remote-address 10.1.1.1

sa spi outbound esp 54321

sa spi inbound esp 12345

sa string-key outbound esp simple gfedcba

sa string-key inbound esp simple abcdefg

quit

#

interface GigabitEthernet0/0

 port link-mode route

 combo enable copper

 ip address 10.1.4.1 255.255.255.0

 ipsec apply policy mypolicy

#

 ip route-static 0.0.0.0 0 10.1.4.2

#

期待各位大神的指导啊啊