F100防火墙 ipsec vpn 隧道模式 tunnel 接口起不来

配置完成后 tunnel 1接口down  协议 down     护理网出口配置有nat

[WaiWang_FW_1030-Tunnel1]

[WaiWang_FW_1030-Tunnel1]dis cu 

#

interface Tunnel1 mode ipsec

 description ip 183.69.12.12

 ip address 3.3.3.1 255.255.255.0

 source 183.64.12.133

 tunnel protection ipsec profile abc

#

security-zone name DMZ

#

security-zone name Untrust

 import interface GigabitEthernet1/0/0

 import interface Tunnel1

#

ipsec transform-set abc

 esp encryption-algorithm aes-cbc-128 

 esp authentication-algorithm sha1 

#

ipsec profile abc isakmp

 transform-set abc 

 ike-profile abc

#

ipsec policy GE1/0/0 10 isakmp template GE1/0/0

#

ike profile abc

 keychain abc

 exchange-mode aggressive

 local-identity address 183.64.12.133

 match remote identity address 183.69.12.12 255.255.255.255

#

ike keychain abc

 pre-shared-key address 183.69.12.12 255.255.255.252 key cipher $c$3$yPHsM6yWnTe6nKcbUHzFcHUDLPjMXgasJWj9NQ==

#              

#

security-policy ip

 rule 10 name any

  action pass

  logging enable

  counting enable

  profile 10_IPv4

#