ipsec 第二阶段协商不起来

对端为tp-link设备 （100.64.139.27为对端路由器私网地址，113.110.170.7为对端pppoe拨号公网地址）

%Sep  5 09:33:02:375 2024 H3C_VPN2 IKE/6/IKE_P1_SA_TERMINATE: The IKE phase 1 SA was deleted.

Reason: An IKE SA deletion message was received from peer.

SA information:

Role: responder

Local IP: 58.61.144.54

Local ID type: IPV4_ADDR

Local ID: 58.61.144.54

Local port: 4500

Retransmissions: 0

Remote IP: 113.110.170.7

Remote ID type: IPV4_ADDR

Remote ID: 100.64.139.27

Remote port: 42620

Recived retransmissions: 0

Inside VPN instance:

Outside VPN instance:

Initiator COOKIE: 2966e60419ff5273

Responder COOKIE: b74e83e0a17112a7

Connection ID: 865947

Tunnel ID: 35

IKE profile name: branch_dynamic

%Sep  5 09:33:02:579 2024 H3C_VPN2 IKE/6/IKE_P2_SA_ESTABLISH_FAIL: Failed to establish phase 2 SA in IKE_P2_STATE_GETSP state.

Reason: Failed to get IPsec policy as phase 2 responder.

SA information:

Role: responder

Local address: 58.61.144.54

Remote address: 113.110.170.7

Sour addr: / Port: 0 Protocol:

Dest addr: / Port: 0 Protocol:

Inside VPN instance:

Outside VPN instance:

Inbound AH SPI: 0

Outbound AH SPI: 0

Inbound ESP SPI: 0

Outbound ESP SPI: 0

Initiator COOKIE: 3e53252dd306bf42

Responder COOKIE: fc64e980671ba802

Message ID: 0xbd0de1a8

Connection ID: 1048948

Tunnel ID: 35

%Sep  5 09:33:02:615 2024 H3C_VPN2 IKE/6/IKE_P2_SA_ESTABLISH_FAIL: Failed to establish phase 2 SA in IKE_P2_STATE_GETSP state.

Reason: Failed to get IPsec policy as phase 2 responder.

SA information:

Role: responder

Local address: 58.61.144.54

Remote address: 113.110.170.7

Sour addr: / Port: 0 Protocol:

Dest addr: / Port: 0 Protocol:

Inside VPN instance:

Outside VPN instance:

Inbound AH SPI: 0

Outbound AH SPI: 0

Inbound ESP SPI: 0

Outbound ESP SPI: 0

Initiator COOKIE: 3e53252dd306bf42

Responder COOKIE: fc64e980671ba802

Message ID: 0xcf390927

Connection ID: 1048949

Tunnel ID: 35