MSR2600 ipsec over l2tp连接失败

做了以下配置L2TP连接不上，配置上有十么问题嘛？

ipsec transform-set 2

 encapsulation-mode transport 

 esp encryption-algorithm 3des-cbc

 esp authentication-algorithm md5 

 #

 ipsec transform-set 3

 encapsulation-mode transport 

esp encryption-algorithm aes-cbc-12

 esp authentication-algorithm sha1

 #

 ipsec transform-set 4

 encapsulation-mode transport 

 esp encryption-algorithm aes-cbc-256 

 esp authentication-algorithm sha1 

 #

 ipsec transform-set 5 

 encapsulation-mode transport 

 esp encryption-algorithm des-cbc 

 esp authentication-algorithm sha1 

 #

 ipsec transform-set 6

 encapsulation-mode transport 

 esp encryption-algorithm 3des-cbc 

 esp authentication-algorithm sha1 

 # 

ipsec transform-set 7

encapsulation-mode transport 

 esp encryption-algorithm aes-cbc-192 

 esp authentication-algorithm sha1 

 # 

ipsec policy-template 1 1 

 transform-set 2 3 4 5 6 7

 ike-profile 1 

# 

ipsec policy 1 1 isakmp template 1 

#

ike profile 1

 keychain 2

 local-identity address 60.191.13.94 

match remote identity address 0.0.0.0 0.0.0.0 

 proposal 1 2 3 4 5 6 

 #

ike proposal 1 encryption-algorithm aes-cbc-128

 dh group2 

 authentication-algorithm md5

 #

 ike proposal 2 

 encryption-algorithm 3des-cbc 

 dh group2 

 authentication-algorithm md5

 # 

ike proposal 3

 encryption-algorithm 3des-cbc

 dh group2 

#

 ike proposal 4 

 encryption-algorithm aes-cbc-256 

 dh group2 

#

 ike proposal 5

 dh group2

 #

 ike proposal 6 

 encryption-algorithm aes-cbc-192

 dh group2

 #

  ike keychain 2

 pre-shared-key address 0.0.0.0 0.0.0.0 key cipher $c$3$ISbDYgWbwswe8omEVXmNtswBor2qEw==

 #

 l2tp enable

#

# l2tp-group 1 mode lns 

 allow l2tp virtual-template 1 

 undo tunnel authentication

#

interface Virtual-Template1 

 ppp authentication-mode chap domain system 

 ppp ipcp dns 114.114.114.114 202.101.172.35 

 remote address pool l2tp1

 ip address 192.168.56.1 255.255.255.0

domain system 

 authentication ppp local 

#

 ip pool l2tp1 192.168.56.100 192.168.56.200 

#

interface GigabitEthernet0/0

 port link-mode route description Multiple_Line

 bandwidth 50000

 ip address 60.191.13.94 255.255.255.252

 ipsec apply policy 1 

#