MSR36-10和SecPath V1000-A ipsec vpn对接问题

实际需求是，ospf over gre over ipsec ，但是实际配置中，IPSEC没有建立起来，所以后期改为建立IPSEC匹配的数据流设置成两台路由器的公网地址，然后gre配置的源目地址也是这两个公网地址，tunnel配置的地址运行OSPF，宣告路由，这样配置配置成功了一条链路，但是测试另一条链路的时候始终无法建立ike和ipsec，现把配置贴上来，麻烦各位帮忙看看，谢谢

A路由器：

ospf 1 router-id 10.10.10.10

 area 0.0.0.0

  network 10.100.24.0 0.0.0.255

  network 172.16.250.144 0.0.0.3

  network 172.16.250.148 0.0.0.3

interface GigabitEthernet0/2

 port link-mode route

 description To_LT

 ip address 119.6.69.205 255.255.255.248

 ipsec apply policy test2

interface Tunnel1 mode gre

 ip address 172.16.250.150 255.255.255.252

 source 119.6.69.205

 destination 119.6.69.206

acl advanced 3001

 rule 0 permit ip source 119.6.69.205 0 destination 119.6.69.206 0

ip route-static 0.0.0.0 0 119.6.69.201

ipsec transform-set tran1

 esp encryption-algorithm des-cbc 

 esp authentication-algorithm md5 

#

ipsec transform-set tran2

 esp encryption-algorithm 3des-cbc 

 esp authentication-algorithm md5 

#

ipsec policy test2 1 isakmp

 transform-set tran1 

 security acl 3001 

 remote-address 119.6.69.206

 ike-profile zhongxin

#

ike profile zhongxin

 keychain zhongxin

 exchange-mode aggressive

 local-identity fqdn jiufang

 match remote identity fqdn zhongxin

 match remote identity address 119.6.69.206 255.255.255.248

 proposal 1 2 

ike proposal 1

 encryption-algorithm 3des-cbc

 dh group2

 authentication-algorithm md5

#

ike proposal 2

#

ike keychain zhongxin

 pre-shared-key hostname zhongxin key simple 123456

#

B路由器：

 ike local-name zhongxin

#

ike proposal 1

 authentication-algorithm md5

#

ike proposal 2

 encryption-algorithm 3des-cbc

 dh group2

 authentication-algorithm md5             

#

ike peer jf

 exchange-mode aggressive

 pre-shared-key 123456

 remote-address 119.6.69.205

 local-address 119.6.69.206

 nat traversal

#

ipsec policy-template jf 1

 ike-peer jiufang

 proposal 1 2

#

ipsec policy all_peer 4 isakmp template jiufang

interface GigabitEthernet0/0.2

 mtu 1400

 description TO_UC

 tcp mss 1300

 ip address 119.6.69.206 255.255.255.248

 vlan-type dot1q vid 200

 ipsec policy all_peer

interface Tunnel11

 description TO-jf

 ip address 172.16.250.149 255.255.255.252

 source 119.6.69.206

 destination 119.6.69.205

 ospf cost 1000

#

ospf 1

 area 0.0.0.0

  network 10.100.3.80 0.0.0.7

  network 172.16.250.149 0.0.0.0

 ip route-static 0.0.0.0 0.0.0.0 119.6.69.201 preference 60

谢谢各位了