求助，ipsec 野蛮模式隧道起不来

用hcl模拟器配置ipsec主模式能通，野蛮模式怎么都不痛，搞了一天，望大神指点一下

R1配置:
ipsec transform-set cq
esp encryption-algorithm des-cbc 
esp authentication-algorithm md5

#ipsec policy cq 1 isakmp
 transform-set cq 
 ike-profile cq

# ike identity fqdn bj

#ike profile cq keychain k1
exchange-mode aggressive
local-identity address 200.1.1.1
 match remote identity fqdn cq
proposal 1

#ike proposal 1

#ike keychain k1
 pre-shared-key hostname cq key cipher $c$3$CzKlN3Y6uBs/E7zjB99GyxY/P3 UYQ==

R3配置:
acl advanced 3000
 rule 0 permit ip source 192.168.2.0 0.0.0.255 destination 192.168.1.0 0.0.0.255

#ipsec transform-set bj
 esp encryption-algorithm des-cbc
  esp authentication-algorithm md5

#ipsec policy bj 1 isakmp
transform-set bj 
 security acl 3000 
 remote-address 200.1.1.1
 ike-profile bj

# ike identity fqdn cq

#ike profile bj keychain k1
 exchange-mode aggressive
local-identity fqdn cq
match remote identity address 200.1.1.1 255.255.255.0 proposal 1

 #ike proposal 1

#ike keychain k1 pre-shared-key address 200.1.1.1 255.255.255.255 key cipher
查看ike sa能看到对方地址，但是查看ipsec sa
就没有，这个是不是代表ipsec的隧道没建立起来？

$c$3$q8yjbwBbGGgOXeHdOLfWxrES8GiWSQ==