IPSEC问题在哪里

RTA配置：#
 ip route-static 20.1.1.0 24 1.1.1.2
#
acl advanced 3000
 rule 0 permit ip source 10.1.1.0 0.0.0.255 destination 20.1.1.0 0.0.0.255

#
ipsec transform-set tran1
 esp encryption-algorithm 3des-cbc
 esp authentication-algorithm md5
#
ipsec policy map1 10 isakmp
 transform-set tran1
 security acl 3000
 local-address 1.1.1.1
 remote-address 2.2.2.2
 ike-profile profile1

#
ike profile profile1
 keychain keychaina1
 match remote identity address 2.2.2.2 255.255.255.0
 proposal 1
#
ike proposal 1
 encryption-algorithm 3des-cbc
 dh group2
 authentication-algorithm md5
 sa duration 3600

ike keychain keychain1
 pre-shared-key address 2.2.2.2 255.255.255.0 key cipher $c$3$BXe1mMieZoyBmLDjsahHPB5U7OBO1uUVew==
RTB：只配置了接口IP

RTC配置：

#
 ip route-static 10.1.1.0 24 2.2.2.1
#
acl advanced 3000
 rule 0 permit ip source 20.1.1.0 0.0.0.255 destination 10.1.1.0 0.0.0.255

ipsec transform-set tran1
 esp encryption-algorithm 3des-cbc
 esp authentication-algorithm md5

#
ipsec policy map1 10 isakmp
 security acl 3000
 local-address 2.2.2.2
 remote-address 1.1.1.1

ike-profile profile1
#
ike profile profile1
 keychain keychain1
 match remote identity address 1.1.1.1 255.255.255.0
 proposal 1
#
ike proposal 1
 encryption-algorithm 3des-cbc
 dh group2
 authentication-algorithm md5
 sa duration 3600

ike keychain keychain1
 pre-shared-key address 1.1.1.1 255.255.255.0 key cipher $c$3$okRjPzubbtizC0befqhdC1TId9qEVs5M3Q==