GRE OVER IPSEC

做gre over IPSec

现在ike sa 能起来，gre能和对面通信
但是IPSEC SA 起不来，是什么问题呢？
报错如下：
The current terminal is enabled to display logs. <FW>%Sep 3 19:05:23:927 2021 FW IPSEC/6/IPSEC_SA_ESTABLISH_FAIL: Failed to establish IPsec SA. Reason: The policy contains incorrect ACL or IKE profile configuration.. SA information: Role: responder. Local address: 101.207.133.198 Remote address: 119.6.84.100 Sour addr: 192.168.161.0/255.255.255.0 Port: 0 Protocol: IP Dest addr: 0.0.0.0/0.0.0.0 Port: 0 Protocol: IP Inside VPN instance: Outside VPN instance: Inbound AH SPI: 0 Outbound AH SPI: 0 Inbound ESP SPI: 0 Outbound ESP SPI: 0 ACL number: 0 %Sep 3 19:05:23:927 2021 FW IPSEC/6/IPSEC_SA_ESTABLISH_FAIL: Failed to establish IPsec SA. Reason: The policy contains incorrect ACL or IKE profile configuration.. SA information: Role: responder. Local address: 101.207.133.198 Remote address: 119.6.84.100 Sour addr: 192.168.163.0/255.255.255.0 Port: 0 Protocol: IP Dest addr: 0.0.0.0/0.0.0.0 Port: 0 Protocol: IP Inside VPN instance: Outside VPN instance: Inbound AH SPI: 0 Outbound AH SPI: 0 Inbound ESP SPI: 0 Outbound ESP SPI: 0 ACL number: 0 %Sep 3 19:05:23:928 2021 FW IPSEC/6/IPSEC_SA_ESTABLISH_FAIL: Failed to establish IPsec SA. Reason: The policy contains incorrect ACL or IKE profile configuration.. SA information: Role: responder. Local address: 101.207.133.198 Remote address: 119.6.84.100 Sour addr: 192.168.166.0/255.255.255.0 Port: 0 Protocol: IP Dest addr: 0.0.0.0/0.0.0.0 Port: 0 Protocol: IP Inside VPN instance: Outside VPN instance: Inbound AH SPI: 0 Outbound AH SPI: 0 Inbound ESP SPI: 0 Outbound ESP SPI: 0 ACL number: 0 %Sep 3 19:05:23:928 2021 FW IPSEC/6/IPSEC_SA_ESTABLISH_FAIL: Failed to establish IPsec SA. Reason: The policy contains incorrect ACL or IKE profile configuration.. SA information: Role: responder. Local address: 101.207.133.198 Remote address: 119.6.84.100 Sour addr: 192.168.164.0/255.255.255.0 Port: 0 Protocol: IP Dest addr: 0.0.0.0/0.0.0.0 Port: 0 Protocol: IP Inside VPN instance: Outside VPN instance: Inbound AH SPI: 0 Outbound AH SPI: 0 Inbound ESP SPI: 0 Outbound ESP SPI: 0 ACL number: 0 %Sep 3 19:05:23:929 2021 FW IKE/6/IKE_P2_SA_ESTABLISH_FAIL: Failed to establish phase 2 SA in IKE_P2_STATE_GETSP state. Reason: Failed to get IPsec policy as phase 2 responder. SA information: Role: responder Local address: 101.207.133.198 Remote address: 119.6.84.100 Sour addr: / Port: 0 Protocol: Dest addr: / Port: 0 Protocol: Inside VPN instance: Outside VPN instance: Inbound AH SPI: 0 Outbound AH SPI: 0 Inbound ESP SPI: 0 Outbound ESP SPI: 0 Initiator COOKIE: 7a9821b299055388 Responder COOKIE: e89fc4b60bf04945 Message ID: 0xb5b40ec0 Connection ID: 1696 Tunnel ID: 1 %Sep 3 19:05:23:929 2021 FW IKE/6/IKE_P2_SA_ESTABLISH_FAIL: Failed to establish phase 2 SA in IKE_P2_STATE_GETSP state. Reason: Failed to get IPsec policy as phase 2 responder. SA information: Role: responder Local address: 101.207.133.198 Remote address: 119.6.84.100 Sour addr: / Port: 0 Protocol: Dest addr: / Port: 0 Protocol: Inside VPN instance: Outside VPN instance: Inbound AH SPI: 0 Outbound AH SPI: 0 Inbound ESP SPI: 0 Outbound ESP SPI: 0 Initiator COOKIE: 7a9821b299055388 Responder COOKIE: e89fc4b60bf04945 Message ID: 0xa153b496 Connection ID: 1697 Tunnel ID: 1 %Sep 3 19:05:23:930 2021 FW IKE/6/IKE_P2_SA_ESTABLISH_FAIL: Failed to establish phase 2 SA in IKE_P2_STATE_GETSP state. Reason: Failed to get IPsec policy as phase 2 responder. SA information: Role: responder Local address: 101.207.133.198 Remote address: 119.6.84.100 Sour addr: / Port: 0 Protocol: Dest addr: / Port: 0 Protocol: Inside VPN instance: Outside VPN instance: Inbound AH SPI: 0 Outbound AH SPI: 0 Inbound ESP SPI: 0 Outbound ESP SPI: 0 Initiator COOKIE: 7a9821b299055388 Responder COOKIE: e89fc4b60bf04945 Message ID: 0xfc087988 Connection ID: 1698 Tunnel ID: 1 %Sep 3 19:05:23:931 2021 FW IKE/6/IKE_P2_SA_ESTABLISH_FAIL: Failed to establish phase 2 SA in IKE_P2_STATE_GETSP state. Reason: Failed to get IPsec policy as phase 2 responder. SA information: Role: responder Local address: 101.207.133.198 Remote address: 119.6.84.100 Sour addr: / Port: 0 Protocol: Dest addr: / Port: 0 Protocol: Inside VPN instance: Outside VPN instance: Inbound AH SPI: 0 Outbound AH SPI: 0 Inbound ESP SPI: 0 Outbound ESP SPI: 0 Initiator COOKIE: 7a9821b299055388 Responder COOKIE: e89fc4b60bf04945 Message ID: 0xfaf617c7 Connection ID: 1699 Tunnel ID: 1