f1000 防火墙，配置完l2tp加上ipsec后怎么也连不上

f1000 防火墙，配置完l2tp加上ipsec后使用windows内置拨号怎么也连不上，前辈看看ipsec部分代码是否有问题，谢谢了！

Ipsec部分

H3C]ike proposal 1

[H3C-ike-proposal-1]encryption-algorithm aes-cbc-128

[H3C-ike-proposal-1]authentication-algorithm md5

[H3C-ike-proposal-1]dh group2

[H3C]ike keychain 1

[H3C-ike-keychain-1]pre-shared-key address 0.0.0.0 0 key simple 123456

[H3C]ike profile 1

[H3C-ike-profile-1]keychain 1

[H3C-ike-profile-1]exchange-mode aggressive

[H3C-ike-profile-1]local-identity address x.x.x.x

[H3C-ike-profile-1]match remote identity address 0.0.0.0 0.0.0.0

[H3C-ike-profile-1]proposal 1

[H3C]ipsec transform-set 1

[H3C-ipsec-transform-set-1]encapsulation-mode transport

[H3C-ipsec-transform-set-1]esp encryption-algorithm aes-cbc-128

[H3C-ipsec-transform-set-1]esp authentication-algorithm sha1

acl 3003

rule permit udp source-port eq 1701

[H3C]ipsec policy-template 1 1

[H3C-ipsec-policy-template-1-1] security acl 3003

[H3C-ipsec-policy-template-1-1]transform-set 1

[H3C-ipsec-policy-template-1-1]ike-profile 1

[H3C]ipsec policy 1 1 isakmp template 1

H3C]interface GigabitEthernet 1/0/1

[H3C-GigabitEthernet0/0]ipsec apply policy 1

Ipsec部分

H3C]ike proposal 1

[H3C-ike-proposal-1]encryption-algorithm aes-cbc-128

[H3C-ike-proposal-1]authentication-algorithm md5

[H3C-ike-proposal-1]dh group2

[H3C]ike keychain 1

[H3C-ike-keychain-1]pre-shared-key address 0.0.0.0 0 key simple 123456

[H3C]ike profile 1

[H3C-ike-profile-1]keychain 1

[H3C-ike-profile-1]exchange-mode aggressive

[H3C-ike-profile-1]local-identity address x.x.x.x

[H3C-ike-profile-1]match remote identity address 0.0.0.0 0.0.0.0

[H3C-ike-profile-1]proposal 1

[H3C]ipsec transform-set 1

[H3C-ipsec-transform-set-1]encapsulation-mode transport

[H3C-ipsec-transform-set-1]esp encryption-algorithm aes-cbc-128

[H3C-ipsec-transform-set-1]esp authentication-algorithm sha1

acl 3003

rule permit udp source-port eq 1701

[H3C]ipsec policy-template 1 1

[H3C-ipsec-policy-template-1-1] security acl 3003

[H3C-ipsec-policy-template-1-1]transform-set 1

[H3C-ipsec-policy-template-1-1]ike-profile 1

[H3C]ipsec policy 1 1 isakmp template 1

H3C]interface GigabitEthernet 1/0/1

[H3C-GigabitEthernet0/0]ipsec apply policy 1