f100-m-g2防火墙做网关设备，配置完ssl vpn后，能拨号成功，但是一直提示认真失败，

可以参照这个链接中的手册进行对照排查

https://www.h3c.com/cn/d_202001/1271976_30005_0.htm#_Toc30509075

一、检查配置

#
interface SSLVPN-AC1
 ip address 19.x.x.1 255.255.255.0
#
#
sslvpn gateway gw
 ip address 123.x.x.74 port 4430
 ssl server-policy ssl
 service enable
#
#
sslvpn context ctx
 gateway gw
 ip-tunnel interface SSLVPN-AC1
 ip-tunnel address-pool pool1 mask 255.255.255.0
 ip-route-list rtlist
  include 19.x.x.0 255.255.255.0
 policy-group pgroup
  filter ip-tunnel acl 3700
  filter web-access acl 3700
  filter tcp-access acl 3700
  ip-tunnel access-route ip-route-list rtlist
 service enable
#

检查配置没有问题。

二、查看证书状态

[FW]pki validate-certificate domain sslvpn ca
Verifying certificates......
        Serial Number:
            12:77:61:df:a6:01:45:a7:47:5e:61:a7:5b:20:0a:31
        Issuer:
            CN=H3CTS-Security-CA
        Subject:
            CN=H3CTS-Security-CA
Verify result: OK

[FW]pki validate-certificate domain sslvpn lo
[FW]pki validate-certificate domain sslvpn local
Verifying certificates......
        Serial Number:
            61:07:d6:de:00:00:00:00:00:05
        Issuer:
            CN=H3CTS-Security-CA
        Subject:
            C=CN
            ST=ZheJiang
            L=HangZhou
            O=H3C
            OU=TSC
            CN=Security
Verify result: OK

证书状态正常。

三、查看SSL VPN状态

[FW]dis sslvpn gateway
Gateway name: gw
  Operation state: Up
  IP: 123.x.x.74 Port: 4430
  SSL server policy configured: ssl
  SSL server policy in use: ssl
  Front VPN instance: Not configured

[FW]dis sslvpn context
Context name: ctx
  Operation state: Up
  AAA domain: Not specified
  Certificate authentication: Disabled
  Dynamic password: Disabled
  Code verification: Disabled
  Default policy group: pgroup
  Associated SSL VPN gateway: gw
  Maximum users allowed: 1048575
  VPN instance: Not configured
  Idle timeout: 30 min

SSL VPN状态正常。

四、查看会话

[FW]display session table ipv4 destination-ip 123.x.x.74 destination-port 4430 verbose

Slot 1:

Initiator:

  Source      IP/port: 221.12.4.143/29039

  Destination IP/port: 123.x.x.74/4430

  DS-Lite tunnel peer: -

  VPN instance/VLAN ID/Inline ID: -/-/-

  Protocol: TCP(6)

  Inbound interface: Route-Aggregation2

  Source security zone: Untrust

Responder:

  Source      IP/port: 123.x.x.74/4430

  Destination IP/port: 221.12.4.143/29039

  DS-Lite tunnel peer: -

  VPN instance/VLAN ID/Inline ID: -/-/-

  Protocol: TCP(6)

  Inbound interface: InLoopBack0

  Source security zone: Local

State: TCP_CLOSE

Application: GENERAL_TCP

Start time: 2017-06-13 15:32:30  TTL: 0s

Initiator->Responder:            2 packets        140 bytes

Responder->Initiator:            2 packets         80 bytes

Total sessions found: 1 

Slot 2:

Initiator:

  Source      IP/port: 221.12.4.143/29039

  Destination IP/port: 123.x.x.74/4430

  DS-Lite tunnel peer: -

  VPN instance/VLAN ID/Inline ID: -/-/-

  Protocol: TCP(6)

  Inbound interface: Route-Aggregation2

  Source security zone: Untrust

Responder:

  Source      IP/port: 123.x.x.74/4430

  Destination IP/port: 221.12.4.143/29039

  DS-Lite tunnel peer: -

  VPN instance/VLAN ID/Inline ID: -/-/-

  Protocol: TCP(6)

  Inbound interface: InLoopBack0

  Source security zone: Local

State: TCP_SYN_RECV

Application: GENERAL_TCP

Start time: 2017-06-13 15:32:30  TTL: 27s

Initiator->Responder:            1 packets         60 bytes

Responder->Initiator:            1 packets         60 bytes

Total sessions found: 1