IPSec VPN

#nat static outbound 10.1.0.104 157.122.179.43 

#

 ipsec transform-set FS

 esp encryption-algorithm des-cbc

 esp authentication-algorithm md5

#

ipsec transform-set sap_vpn

 esp encryption-algorithm 3des-cbc

 esp authentication-algorithm md5

#

ipsec policy FS 1 isakmp

 transform-set FS

 security acl 3998

 local-address 121.15.11.113

 remote-address 202.104.21.77

 ike-profile FS

#

ipsec policy sap_vpn 1 isakmp

 transform-set sap_vpn

 security acl 3920

 local-address 121.15.11.113

 remote-address 194.39.131.167

 ike-profile sap_vpn

#

ike profile FS

 keychain FS

 local-identity address 121.15.11.113

 match remote identity address 202.104.21.77 255.255.255.255

 match local address GigabitEthernet1/0/1

 proposal 10

#

ike profile sap_vpn

 keychain sap_vpn

 local-identity address 121.15.11.113

match remote identity address 194.39.131.167 255.255.255.255

 match local address GigabitEthernet1/0/1

 proposal 3

#

interface GigabitEthernet1/0/1

ip address  121.15.11.113   255.255.255.240

nat static enable

nat server protocol tcp  121.15.11.115    inside 10.1.0.104 

nat server protocol udp 121.15.11.115   inside 10.1.0.104 

ipsec apply policy sap_vpn                                                                     

ipsec apply policy FS                       

F1050的防火墙

上面两条IPSecVPN ,在用的一条是FS，另外一条SAP_VPN还没配置成功。

现在同时apply在外网接口1/0/1下，只能存在一条：即apply SAP_VPN后 FS这条就掉线。

目前有两个公网IP，121.15.11.113已配置在外网接口，使用中；还一个想做静态NAT (121.15.11.115----10.1.0.104)。

请问该如何配置，上面的配置哪里出了问题，请帮忙指出。感谢感谢！