ipsec vpn

分部和总部对接VPN，VPN建立起来了，但是ping不通，查看ipsec sa只有发送的MAX序列号，没有收到的MAX序列号。
<H3C>dis ike sa    Connection-ID   Remote                Flag         DOI    ------------------------------------------------------------------    10              222.168.22.50         RD           IPsec  Flags:RD--READY RL--REPLACED FD-FADING RK-REKEY<H3C>dis ipsec sa-------------------------------Interface: GigabitEthernet0/0-------------------------------  -----------------------------  IPsec policy: 1  Sequence number: 1  Mode: ISAKMP  -----------------------------    Tunnel id: 0    Encapsulation mode: tunnel    Perfect Forward Secrecy: dh-group2    Inside VPN:     Extended Sequence Numbers enable: N    Traffic Flow Confidentiality enable: N    Path MTU: 1444    Tunnel:        local  address: 222.160.126.34        remote address: 222.168.22.50    Flow:        sour addr: 10.4.31.0/255.255.255.0  port: 0  protocol: ip        dest addr: 10.0.0.0/255.0.0.0  port: 0  protocol: ip    [Inbound ESP SAs]      SPI: 3330550998 (0xc6842cd6)      Connection ID: 81604378625      Transform set: ESP-ENCRYPT-3DES-CBC ESP-AUTH-SHA1      SA duration (kilobytes/sec): 1843200/3600      SA remaining duration (kilobytes/sec): 1843200/3044      Max received sequence-number: 0      Anti-replay check enable: Y      Anti-replay window size: 64      UDP encapsulation used for NAT traversal: N      Status: Active    [Outbound ESP SAs]      SPI: 1438435178 (0x55bcc76a)      Connection ID: 47244640256      Transform set: ESP-ENCRYPT-3DES-CBC ESP-AUTH-SHA1      SA duration (kilobytes/sec): 1843200/3600      SA remaining duration (kilobytes/sec): 1843166/3044      Max sent sequence-number: 599      UDP encapsulation used for NAT traversal: N      Status: Active