MSR800 ipsec vpn无法启动nat traversal

内网----MSR800---光猫

使用msr800与远端建立ipsec vpn，第一段和第二阶段都起来了，但是无法互通。

在配置ike peer 的时候，我启动了 nat traversal，但是检查NAT穿越功能是否启动时（display ike sa verbose），它依然显示 nat traversal: NO，

没搞懂为什么nat  traversal 启动不了？

H3C Comware Platform Software Comware Software, Version 5.20, Release 2514P04 Copyright (c) 2004-2015 Hangzhou H3C Tech. Co., Ltd. All rights reserved. H3C MSR800 uptime is 0 week, 4 days, 8 hours, 36 minutes

ike peer yunlifang 

exchange-mode aggressive 

proposal 1 pre-shared-key cipher $c$3$bYNlvxmGbmi34HtXSZbwcIEAwLeYzedtyYiEggwOjA==

 remote-name 203.156.216.125 

remote-address 203.156.216.125 

nat traversal 

dpd iguangdong.1

[WFGZ-MSR800]dis ike sa 

total phase-1 SAs: 2 

connection-id peer  flag phase doi 

----------------------------------------------------------------

 423 203.156.216.125 RD|ST 1 IPSEC 425 114.67.31.2 RD|ST 1 IPSEC 

424 203.156.216.125 RD|ST 2 IPSEC 426 114.67.31.2 RD|ST 2 IPSEC 

connection id: 427 

vpn-instance: 

inside vpn-instance: 

transmitting entity: initiator 

--------------------------------------------- 

local ip: 113.119.27.212 

local id type: IPV4_ADDR 

local id: 113.119.27.212 

remote ip: 203.156.216.125 

remote id type: IPV4_ADDR 

remote id: 203.156.216.125 

authentication-method: PRE_SHARED

 authentication-algorithm: SHA 

encryption-algorithm: 3DES_CBC 

life duration(sec): 86400 

remaining key duration(sec): 86338 

exchange-mode: AGGRESSIVE 

diffie-hellman group: GROUP2 

nat traversal: NO