防火墙ipsec对接某出口设备

对端：

数据流两端配置没错，加密算法也没错。本端ID和对端ID对应防火墙的fdqn(这台设备对接深信服也是这样配)，防火墙出口也做了nat拒绝数据流，想不明白还有哪里配错了。

配置：

ipsec transform-set ac18060052_IPv4_1

 esp encryption-algorithm 3des-cbc 

 esp authentication-algorithm md5 

 pfs dh-group2

#

ipsec policy ac18060052 1 isakmp

 transform-set ac18060052_IPv4_1 

 security acl name IPsec_ac18060052_IPv4_1 

 remote-address 183.62.20.2 

 description ac180600521

 ike-profile ac18060052_IPv4_1

#

ike profile ac18060052_IPv4_1

 keychain ac18060052_IPv4_1

 exchange-mode aggressive

 local-identity fqdn ac180600521

 match remote identity fqdn ac180600521

 match local address GigabitEthernet1/0/1

 proposal 1 

#

ike proposal 1

 encryption-algorithm 3des-cbc

 dh group2

 authentication-algorithm md5

 sa duration 3600

#              

ike keychain ac18060052_IPv4_1

 match local address GigabitEthernet1/0/1

 pre-shared-key hostname ac180600521 key cipher $c$3$RkGTp7WVv383RCqW64Dv2pve4tep/MCpz2k+

对端有公网地址，本端出口DHCP获取私网地址，本段IPSEC数据流ping对端数据流不通

dis ike sa 
dis ipsec sa
都没有相关信息