在线等，急，分部到总部建立IPSEC VPN 第二阶段建立不起来

看下两边的ipsec transform-set 1 esp encryption-algorithm 3des-cbc esp authentication-algorithm sha1 这部分的配置是否一样

<H3C SecPath F1030>dis cu # version 7.1.064, Release 9333P22 # sysname H3C SecPath F1030 # context Admin id 1 # telnet server enable # irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1 # dialer-group 1 rule ip permit # dhcp enable # password-recovery enable # vlan 1 # policy-based-route aaa deny node 0 if-match acl 3002 # policy-based-route aaa permit node 2 if-match acl 3003 apply output-interface Dialer0 # policy-based-route aaa permit node 5 if-match acl 3001 apply next-hop 210.21.233.162 # interface Dialer0 mtu 1492 ppp chap password cipher $c$3$r7T4P2ndXyQRliczyyMygEJpqapr8lFp+vjo ppp chap user 075507397790@163.gd ppp ipcp dns admit-any ppp ipcp dns request ppp pap local-user 075507397790@163.gd password cipher $c$3$yescaBcgD1rDSFLx4jW1Sltyhd+kCAaADQ/q dialer bundle enable dialer-group 1 dialer timer idle 0 dialer timer autodial 5 ip address ppp-negotiate tcp mss 1400 nat outbound 3003 # interface NULL0 # interface GigabitEthernet1/0/0 port link-mode route ip address 192.168.0.1 255.255.255.0 # interface GigabitEthernet1/0/1 port link-mode route mtu 1492 undo jumboframe enable ip address 210.21.233.162 255.255.255.252 ipsec apply policy 总部 gateway 210.21.233.161 # interface GigabitEthernet1/0/2 port link-mode route ip address 192.168.10.1 255.255.255.0 ip policy-based-route aaa # interface GigabitEthernet1/0/3 port link-mode route mtu 1492 tcp mss 1024 nat outbound 3003 pppoe-client dial-bundle-number 0 # interface GigabitEthernet1/0/4 port link-mode route # interface GigabitEthernet1/0/5 port link-mode route # interface GigabitEthernet1/0/6 port link-mode route # interface GigabitEthernet1/0/7 port link-mode route # interface GigabitEthernet1/0/8 port link-mode route # interface GigabitEthernet1/0/9 port link-mode route # interface GigabitEthernet1/0/10 port link-mode route # interface GigabitEthernet1/0/11 port link-mode route # interface GigabitEthernet1/0/12 port link-mode route # interface GigabitEthernet1/0/13 port link-mode route # interface GigabitEthernet1/0/14 port link-mode route # interface GigabitEthernet1/0/15 port link-mode route # interface GigabitEthernet1/0/16 port link-mode route # interface GigabitEthernet1/0/17 port link-mode route # interface GigabitEthernet1/0/18 port link-mode route # interface GigabitEthernet1/0/19 port link-mode route # interface GigabitEthernet1/0/20 port link-mode route # interface GigabitEthernet1/0/21 port link-mode route # interface GigabitEthernet1/0/22 port link-mode route # interface GigabitEthernet1/0/23 port link-mode route # interface SSLVPN-AC11 ip address 192.168.100.1 255.255.255.0 # security-zone name Local # security-zone name Trust import interface GigabitEthernet1/0/2 # security-zone name DMZ # security-zone name Untrust import interface Dialer0 import interface GigabitEthernet1/0/1 import interface GigabitEthernet1/0/3 import interface SSLVPN-AC11 # security-zone name Management import interface GigabitEthernet1/0/0 # zone-pair security source Any destination Any packet-filter 3003 # scheduler logfile size 16 # line class aux user-role network-operator # line class console authentication-mode scheme user-role network-admin # line class usb user-role network-operator # line class vty user-role network-operator # line aux 0 user-role network-admin # line con 0 user-role network-admin # line vty 0 63 authentication-mode scheme user-role network-admin # ip route-static 192.168.2.0 24 192.168.10.2 ip route-static 192.168.3.0 24 192.168.10.2 # ssh server enable # acl advanced 3000 step 10 rule 0 permit ip # acl advanced 3001 rule 0 permit ip source 192.168.3.0 0.0.0.255 destination 192.168.20.0 0.0.0.255 rule 5 permit ip source 192.168.3.0 0.0.0.255 destination 192.168.30.0 0.0.0.255 rule 10 permit ip source 192.168.2.0 0.0.0.255 destination 192.168.20.0 0.0.0.255 rule 15 permit ip source 192.168.2.0 0.0.0.255 destination 192.168.30.0 0.0.0.255 rule 20 deny ip # acl advanced 3002 rule 0 permit ip destination 192.168.100.0 0.0.0.255 rule 5 permit ip source 192.168.100.0 0.0.0.255 rule 10 permit ip source 192.168.30.0 0.0.0.255 rule 15 permit ip destination 192.168.30.0 0.0.0.255 rule 20 permit ip source 192.168.20.0 0.0.0.255 rule 25 permit ip destination 192.168.20.0 0.0.0.255 # acl advanced 3003 rule 0 deny ip source 192.168.100.0 0.0.0.255 rule 5 deny ip source 192.168.30.0 0.0.0.255 rule 10 deny ip source 192.168.20.0 0.0.0.255 rule 15 deny ip destination 192.168.100.0 0.0.0.255 rule 20 deny ip destination 192.168.30.0 0.0.0.255 rule 25 deny ip destination 192.168.20.0 0.0.0.255 rule 30 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.20.0 0.0.0.255 rule 45 deny ip source 192.168.2.0 0.0.0.255 destination 192.168.20.0 0.0.0.255 rule 50 deny ip source 192.168.2.0 0.0.0.255 destination 192.168.30.0 0.0.0.255 rule 55 deny ip source 192.168.3.0 0.0.0.255 destination 192.168.20.0 0.0.0.255 rule 60 deny ip source 192.168.3.0 0.0.0.255 destination 192.168.30.0 0.0.0.255 rule 65 permit ip source 192.168.2.0 0.0.0.255 rule 70 permit ip source 192.168.3.0 0.0.0.255 rule 75 permit ip source 192.168.10.0 0.0.0.255 # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user 123 class manage authorization-attribute user-role network-operator # local-user admin class manage password hash $h$6$UbIhNnPevyKUwfpm$LqR3+yg1IjNct39MkOR0H0iQXLkYB3jMqM4vbAeoXOhbabIIFnjJPEGR00YiYA1Sz4LiY3FmEdru2fOLMb1shQ== service-type ssh telnet terminal https authorization-attribute user-role level-3 authorization-attribute user-role level-15 authorization-attribute user-role network-admin authorization-attribute user-role network-operator # local-user admin class network password cipher $c$3$rjDlrz3Mb/lxlcMbyZCiolgBAHX/5bltUlZwXw== access-limit 600 service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group ziyuan # session statistics enable # ipsec transform-set 总部_IPv4_1 esp encryption-algorithm 3des-cbc esp authentication-algorithm sha1 # ipsec policy-template 总部 1 transform-set 总部_IPv4_1 local-address 210.21.233.162 description 总 ike-profile 总部_IPv4_1 # ipsec policy 总部 1 isakmp template 总部 # ike identity fqdn 1 ike logging negotiation enable # ike profile 总部_IPv4_1 keychain 总部_IPv4_1 exchange-mode aggressive local-identity fqdn 1 match remote identity fqdn 2 match remote identity fqdn 3 match local address GigabitEthernet1/0/1 # ike keychain 总部_IPv4_1 match local address GigabitEthernet1/0/1 pre-shared-key address 0.0.0.0 0.0.0.0 key cipher $c$3$3aeSh00Ux74JmvzhICn6VyC75tI41W2D # ip https enable webui log enable # sslvpn ip address-pool ippool 192.168.100.2 192.168.100.254 # sslvpn gateway wangguan ip address 210.21.233.162 port 1025 service enable # sslvpn context test gateway wangguan ip-tunnel interface SSLVPN-AC11 ip-tunnel address-pool ippool mask 255.255.255.0 ip-route-list test include 192.168.2.0 255.255.255.0 include 192.168.3.0 255.255.255.0 include 192.168.4.0 255.255.255.0 include 192.168.5.0 255.255.255.0 policy-group ziyuan filter ip-tunnel acl 3000 ip-tunnel access-route ip-route-list test ip-tunnel address-pool ippool mask 255.255.255.0 max-users 600 log user-login enable log resource-access enable session-connections 600 max-onlines 600 service enable # security-policy ip rule 0 name 放通所有策略 action pass # return 这个是总部的，总部的另一个分支是正常，只有这个分支，之前是好好的