MSR2600 IKEv2移动端手机无法连接上
- 0关注
- 0收藏，44浏览
问题描述：
我在MSR2600上按照03-H3C MSR系列路由器 IPsec 数字证书认证典型配置举例-新华三集团-H3C
配好，用手机配置连不上。
这个问题在哪里？
另外现在windows的IKEv2不支持psk,有办法解决吗？
组网及组网描述：
我在MSR2600上按照03-H3C MSR系列路由器 IPsec 数字证书认证典型配置举例-新华三集团-H3C
配好，用手机配置连不上。debug结果如下
Received packet from 116.228.y.y source port 59109 destination port 500.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
I-SPI: c6fad459d0865f02
R-SPI: 0000000000000000
Message ID: 0
Exchange type: SA_INIT
Flags: REQUEST, INITIATOR
Next payload: SA, Length: 1072.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/FSM: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
(Tunnel ID 1578): (R) Current State: IDLE.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Payload contents:
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
SA Next payload: KE, Length: 408.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last proposal: 0x2, Length: 200.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Proposal: 1, Protocol: IKE, SPI size: 0, Transform number: 21.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 12.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: ENCR, Transform ID: AES-CTR.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Key length: 256.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 12.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: ENCR, Transform ID: AES-CBC.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Key length: 256.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 12.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: ENCR, Transform ID: AES-CTR.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Key length: 192.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 12.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: ENCR, Transform ID: AES-CBC.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Key length: 192.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 12.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: ENCR, Transform ID: AES-CTR.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Key length: 128.
*Aug 14 14:39:29:130 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 12.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: ENCR, Transform ID: AES-CBC.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Key length: 128.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: INTEG, Transform ID: AUTH-HMAC-SHA512-256.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: INTEG, Transform ID: AUTH-HMAC-SHA384-192.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: INTEG, Transform ID: AUTH-HMAC-SHA256-128.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: INTEG, Transform ID: AUTH-AES-XCBC-96.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: INTEG, Transform ID: AUTH-AES-CMAC-96.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: D-H, Transform ID: 4096-bit MODP/Group 16.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: D-H, Transform ID: Unknown.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: D-H, Transform ID: 3072-bit MODP/Group 15.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: D-H, Transform ID: 2048-bit MODP/Group 14.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: PRF, Transform ID: PRF-HMAC-SHA1.
*Aug 14 14:39:29:131 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: PRF, Transform ID: PRF-AES128-XCBC.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: PRF, Transform ID: PRF-HMAC-SHA256.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: PRF, Transform ID: PRF-HMAC-SHA384.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: PRF, Transform ID: PRF-HMAC-SHA512.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0, Length: 8.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: PRF, Transform ID: PRF-AES128-CMAC.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last proposal: 0, Length: 204.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Proposal: 2, Protocol: IKE, SPI size: 0, Transform number: 20.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: ENCR, Transform ID: Unknown.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 12.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: ENCR, Transform ID: AES-GCM-16.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Key length: 256.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 12.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: ENCR, Transform ID: AES-GCM-12.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Key length: 256.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 12.
*Aug 14 14:39:29:132 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: ENCR, Transform ID: AES-GCM-8.
*Aug 14 14:39:29:133 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Key length: 256.
*Aug 14 14:39:29:133 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 12.
*Aug 14 14:39:29:133 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: ENCR, Transform ID: AES-GCM-16.
*Aug 14 14:39:29:133 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Key length: 192.
*Aug 14 14:39:29:133 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 12.
*Aug 14 14:39:29:133 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: ENCR, Transform ID: AES-GCM-12.
*Aug 14 14:39:29:133 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Key length: 192.
*Aug 14 14:39:29:133 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 12.
*Aug 14 14:39:29:133 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: ENCR, Transform ID: AES-GCM-8.
*Aug 14 14:39:29:133 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Key length: 192.
*Aug 14 14:39:29:133 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 12.
*Aug 14 14:39:29:133 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: ENCR, Transform ID: AES-GCM-16.
*Aug 14 14:39:29:133 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Key length: 128.
*Aug 14 14:39:29:133 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 12.
*Aug 14 14:39:29:133 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: ENCR, Transform ID: AES-GCM-12.
*Aug 14 14:39:29:133 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Key length: 128.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 12.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: ENCR, Transform ID: AES-GCM-8.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Key length: 128.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: D-H, Transform ID: 4096-bit MODP/Group 16.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: D-H, Transform ID: Unknown.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: D-H, Transform ID: 3072-bit MODP/Group 15.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: D-H, Transform ID: 2048-bit MODP/Group 14.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: PRF, Transform ID: PRF-HMAC-SHA1.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: PRF, Transform ID: PRF-AES128-XCBC.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: PRF, Transform ID: PRF-HMAC-SHA256.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:134 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: PRF, Transform ID: PRF-HMAC-SHA384.
*Aug 14 14:39:29:135 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0x3, Length: 8.
*Aug 14 14:39:29:135 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: PRF, Transform ID: PRF-HMAC-SHA512.
*Aug 14 14:39:29:135 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Last transform: 0, Length: 8.
*Aug 14 14:39:29:135 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Type: PRF, Transform ID: PRF-AES128-CMAC.
*Aug 14 14:39:29:135 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
KE Next payload: NONCE, Length: 520, DH: 4096-bit MODP/Group 16.
*Aug 14 14:39:29:135 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
NONCE Next payload: NOTIFY, Length: 36.
*Aug 14 14:39:29:135 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
NOTIFY Next payload: NOTIFY, Length: 28, Type: NAT_DETECTION_SOURCE_IP, Protocol: NO PROTOCOL, SPI size: 0.
*Aug 14 14:39:29:135 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
NOTIFY Next payload: NOTIFY, Length: 28, Type: NAT_DETECTION_DESTINATION_IP, Protocol: NO PROTOCOL, SPI size: 0.
*Aug 14 14:39:29:135 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
NOTIFY Next payload: NOTIFY, Length: 8, Type: Unknown, Protocol: NO PROTOCOL, SPI size: 0.
*Aug 14 14:39:29:135 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
NOTIFY Next payload: NO_PAYLOAD, Length: 16, Type: Unknown, Protocol: NO PROTOCOL, SPI size: 0.
*Aug 14 14:39:29:135 2026 Off-hub3 IKEV2/7/PACKET: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Request has message id 0, expected from (0 ~ 0).
*Aug 14 14:39:29:135 2026 Off-hub3 IKEV2/7/FSM: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Search policy with vrf 0, local address 58.34.x.x.
*Aug 14 14:39:29:135 2026 Off-hub3 IKEV2/7/FSM: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Policy 10 matched.
*Aug 14 14:39:29:135 2026 Off-hub3 IKEV2/7/FSM: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Process SA payload.
*Aug 14 14:39:29:135 2026 Off-hub3 IKEV2/7/FSM: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Process KE payload.
*Aug 14 14:39:29:135 2026 Off-hub3 IKEV2/7/ERROR: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
Parse KE payload failed.
*Aug 14 14:39:29:136 2026 Off-hub3 IKEV2/7/FSM: vrf = 0, src = 58.34.x.x, dst = 116.228.y.y/59109
(Tunnel ID 1578): IKE SA deleted.
这个问题在哪里？
另外现在windows的IKEv2不支持psk,有办法解决吗？
从debug看设备仅收到500端口首包，未完成IKE_SA_INIT交互，按以下顺序排查：
1. 基础连通性&端口检查
手机侧测试公网ping设备58.34.x.x，确认UDP 500/4500端口放通（NAT场景必须开4500）：
display ipsec policy // 确认IKEv2策略绑定到公网接口
display firewall session table verbose destination-port 500 // 看会话是否建立
2. NAT穿越配置
手机基本都在NAT后，必须开启IKEv2 NAT穿越：
ikev2 profile 名称
nat-keepalive 10
ipsec policy 名称 序号 isakmp
ikev2-profile 名称
3. 证书匹配检查
确认设备证书包含SAN（主题备用名称），手机端导入根CA证书，IKEv2对端ID和证书SAN一致：
display pki certificate local // 查看本地证书SAN/主题
display ikev2 profile // 确认identity local配置与证书匹配
4. 算法兼容性
手机默认加密/完整性算法可能和设备不匹配，调整为通用组合：
ikev2 proposal 名称
encryption aes-cbc-256 aes-cbc-128
integrity sha256 sha1
group modp2048 modp1024
5. 详细debug定位
收集完整IKEv2交互debug：
terminal debugging
debugging ikev2 all
二、Windows IKEv2不支持PSK的解决办法
Windows原生IKEv2客户端默认仅支持证书认证，要使用PSK有两种方案：
1. 修改Windows注册表强制启用PSK（适用于Win10 1809+、Win11）
注册表路径：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\Parameters
新建DWORD值DisableIKENameEkuCheck，数值设为1，重启电脑后即可在VPN属性里配置预共享密钥。
2. 设备侧调整为证书认证
沿用你当前的数字证书配置，Windows导入根证书+用户证书即可原生适配，稳定性比PSK更高。
我改了注册表，属性里没有PSK可配
编辑答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
- 1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
- 3. 是哪家企业？（营业执照，单位登记证明等证件）
- 4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）
抄袭了我的内容
×
原文链接或出处
诽谤我
×
- 1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
对根叔社区有害的内容
×
不规范转载
×
举报说明
我改了注册表，属性里没有PSK可配