ipsec隧道建立成功但是没有数据通过

 IPsec policy: ipsec

  Sequence number: 12

  Mode: ISAKMP

  -----------------------------

    Tunnel id: 8

    Encapsulation mode: tunnel

    Perfect Forward Secrecy:

    Inside VPN:

    Extended Sequence Numbers enable: N

    Traffic Flow Confidentiality enable: N

    Transmitting entity: Responder

    Path MTU: 1444

    Tunnel:

        local  address: 116.128.224.66

        remote address: 223.210.15.64

    Flow:

        sour addr: 10.10.0.0/255.255.0.0  port: 0  protocol: ip

        dest addr: 192.168.101.0/255.255.255.0  port: 0  protocol: ip

    [Inbound ESP SAs]

      SPI: 1041242473 (0x3e101969)

      Connection ID: 9281424326666

      Transform set: ESP-ENCRYPT-3DES-CBC ESP-AUTH-SHA1

      SA idle time: 86400

      SA duration (kilobytes/sec): 1843200/604800

      SA remaining duration (kilobytes/sec): 1843200/604224

      Max received sequence-number: 0

      Anti-replay check enable: Y

      Anti-replay window size: 64

      UDP encapsulation used for NAT traversal: N

      Status: Active

    [Outbound ESP SAs]

      SPI: 994551186 (0x3b47a592)

      Connection ID: 1979979923475

      Transform set: ESP-ENCRYPT-3DES-CBC ESP-AUTH-SHA1

      SA idle time: 86400

      SA duration (kilobytes/sec): 1843200/604800

      SA remaining duration (kilobytes/sec): 1843200/604224

      Max sent sequence-number: 0

      UDP encapsulation used for NAT traversal: N

      Status: Active

#

ike keychain ipsec_IPv4_12

 match local address GigabitEthernet1/0/3

 pre-shared-key address 223.210.15.64 255.255.255.255 key cipher $c$3$B1hCEpJXDhRpvqEz95kQeunHNas=

#

ike proposal 1

 encryption-algorithm 3des-cbc

 dh group2

#

ike profile ipsec_IPv4_12

 keychain ipsec_IPv4_12

 exchange-mode aggressive

 local-identity address 116.128.224.66

 match remote identity address 223.210.15.64 255.255.255.255

 match local address GigabitEthernet1/0/3

 proposal 1

#

ipsec policy ipsec 12 isakmp

 transform-set ipsec_IPv4_12

 security acl name IPsec_ipsec_IPv4_12

 local-address 116.128.224.66

 remote-address 223.210.15.64

 ike-profile ipsec_IPv4_12

 sa trigger-mode auto

#

ipsec transform-set ipsec_IPv4_12

 esp encryption-algorithm 3des-cbc

 esp authentication-algorithm sha1

#

acl advanced name IPsec_ipsec_IPv4_12

 rule 0 permit ip source 10.10.0.0 0.0.255.255 destination 192.168.101.0 0.0.0.255