MSR900 IPSEC连接不成功

总部做点到多点ipsec连接，其他点使用锐捷路由器可以正常连接，只能H3C路由器连接不上

debugging 显示如下

<DWL-H3C-MSR900> *Jan 2 06:53:42:347 2007 DWL-H3C-MSR900 IPSEC/7/DBG: A session is deleted. Source address : 192.168.1.2 Destination address : 111.59.28.76 Source port : 1701 Destination port : 1701 protocol : 17 inside vrfindex : 0 IPsec action : deny *Jan 2 06:53:42:347 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: Slot = 0 ,delete acl:ifindex = 983040,acl number = 3002,acl type = 1. *Jan 2 06:53:42:348 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: Slot = 0 ,delete acl:DrvContext[0] = -1,DrvContext[1] = -1. *Jan 2 06:53:42:349 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: No register IPsec selector interface. *Jan 2 06:53:42:349 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: Slot 0 : Driver return success when process delete-ipsec-selector opt. *Jan 2 06:53:42:350 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_ERROR: An incomplete ipsecCB. so can't add/delete route, event type: 2. *Jan 2 06:53:42:743 2007 DWL-H3C-MSR900 IKE/7/DEBUG: update DPD: IKE port has been closed. *Jan 2 06:53:42:744 2007 DWL-H3C-MSR900 IKE/7/DEBUG: update DPD: IKE port has been closed. *Jan 2 06:53:45:759 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: Get TdbEntry Index: 0x00010000 (16BitMapSeqNo = 0x0001, 16BitTempSeqNo = 0x0000). *Jan 2 06:53:45:760 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA:Can not notify driver creating IPsec selector due to no ACL. *Jan 2 06:53:45:760 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: static RRI was disabled. *Jan 2 06:53:45:761 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: IPsec is notified due to the change of ACL. *Jan 2 06:53:45:783 2007 DWL-H3C-MSR900 IPSEC/7/DBG: A session is created. Source address : 192.168.1.2 Destination address : 111.59.28.76 Source port : 1701 Destination port : 1701 protocol : 17 inside vrfindex : 0 IPsec action : deny *Jan 2 06:53:45:783 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: IPsec is notified due to the change of ACL. *Jan 2 06:53:45:787 2007 DWL-H3C-MSR900 IPSEC/7/DBG: A session is deleted. Source address : 192.168.1.2 Destination address : 111.59.28.76 Source port : 1701 Destination port : 1701 protocol : 17 inside vrfindex : 0 IPsec action : deny *Jan 2 06:53:45:787 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: IPsec is notified due to the change of ACL. *Jan 2 06:53:45:809 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: static RRI was disabled. *Jan 2 06:53:45:809 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: static RRI was disabled. *Jan 2 06:53:45:810 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA:Can not notify driver deleting IPsec selector due to no ACL. *Jan 2 06:53:45:810 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: Slot = 0 ,create acl:ifindex = 983040,acl number = 3002,acl type = 1. *Jan 2 06:53:45:811 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: No register IPsec selector interface. *Jan 2 06:53:45:811 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: Slot = 0 ,create acl:DrvContext[0] = -1,DrvContext[1] = -1. *Jan 2 06:53:45:811 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: Slot 0 : Driver return success when process create-ipsec-selector opt. *Jan 2 06:53:45:812 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: Reset peerName to NULL in tdbEntry, policy : 983040, seq_no : 1 *Jan 2 06:53:45:812 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: static RRI was disabled. *Jan 2 06:53:45:813 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: entry switch to 1 *Jan 2 06:53:45:813 2007 DWL-H3C-MSR900 IPSEC/7/DBG: IPsec_SA: static RRI was disabled. *Jan 2 06:53:45:816 2007 DWL-H3C-MSR900 IPSEC/7/DBG: A session is created. Source address : 192.168.1.2 Destination address : 111.59.28.76 Source port : 1701 Destination port : 1701 protocol : 17 inside vrfindex : 0 IPsec action : deny