模拟器上练习SSL VPN，为什么创建的AC接口协议是down的

模拟器配置好SSL VPN后，使用iNode创建客户端后连接，提示VPN隧道创建失败

创建的AC接口提示协议为down；

debugging报错信息：

[H3C]*Aug 24 10:41:17:969 2022 H3C SSLVPNK/7/SSLVPN_ERROR: -COntext=1; IPAC: Failed to get interface referenced by context 0x1. 

*Aug 24 10:41:17:969 2022 H3C SSLVPNK/7/SSLVPN_ERROR: -COntext=1; IPAC: Failed to send a reply message.

*Aug 24 10:41:17:984 2022 H3C SSLVPNK/7/SSLVPN_ERROR: -COntext=1; Failed to get online node: cOntextID=0x1, OnlineID=0x8. *Aug 24 10:41:17:984 2022 H3C SSLVPNK/7/SSLVPN_ERROR: -COntext=1; Failed to get online node: cOntextID=0x1, OnlineID=0x8.

*Aug 24 10:41:17:984 2022 H3C SSLVPNK/7/SSLVPN_ERROR: -COntext=1; Failed to get online node: cOntextID=0x1, OnlineID=0x8. 

*Aug 24 10:41:17:984 2022 H3C SSLVPNK/7/SSLVPN_ERROR: -COntext=1; Failed to get online node: cOntextID=0x1, OnlineID=0x8. *Aug 24 10:41:17:984 2022 H3C SSLVPNK/7/SSLVPN_ERROR: -COntext=1; Failed to get online node: cOntextID=0x1, OnlineID=0x8. 

防火墙直连MSR-2充当内网，网段192.168.1.0/24；

防火墙连接电脑环回口充当测试外网，网段1.0.0.0/8；

防火墙安全策略放行所有；

防火墙SSL VPN配置：

#

sslvpn ip address-pool WEB 10.10.10.1 10.10.10.9

#

dis sslvpn gateway

Gateway name: WEB 

Operation state: Up

IP: 1.0.0.2 Port: 443

Front VPN instance: Not configured 

#

[H3C]dis sslvpn context Context 

name: WEB 

Operation state: Up

AAA domain: Not specified

Certificate authentication: Disabled

Password authentication: Enabled

Authentication use: All

SMS auth type: Not configured

Urlmasking: Disabled

Code verification: Disabled

Default policy group: Not configured 

Associated SSL VPN gateway: WEB 

Domain name: domainip 

Maximum users allowed: 1048575 VPN instance: Not configured Idle timeout: 30 min Authentication server-type: aaa 

Password changing: Enabled 

#

sslvpn context WEB

gateway WEB domain domainip

ip-tunnel address-pool WEB mask 255.255.255.0

ip-route-list rtlist 

 include 192.168.1.0 255.255.255.0

policy-group PMTWEB

 filter ip-tunnel acl 3000 

 ip-tunnel access-route ip-route-list rtlist

service enable 

#

acl advanced 3000

 rule 0 permit ip source 1.0.0.0 0.0.0.255 destination 192.168.1.0 0.0.0.255

#

local-user test class network

password cipher $c$3$uTh1fZQbltOAA2w7m8hAafrwfifEbjIaPA==

service-type sslvpn

authorization-attribute user-role network-operator 

authorization-attribute sslvpn-policy-group PMTWEB

# 

电脑可ping通防火墙G0/20接口1.0.0.2；

MSR-2可ping通防火墙G0/10；

使用iNode创建客户端，指定网关IP和端口为1.0.0.2:443

iNode客户端提示VPN隧道创建失败；