MSR3640

MSR3640 ipsecvpn

设备配置ipsecvpn  display ike 无相关信息

在对端抓包发现也没有任何报文发送过来

debug 也没有相关信息

ike profile 2 keychain 3commas@666 exchange-mode aggressive local-identity address 114.242.236.151 match remote identity address 123.56.99.4 255.255.255.255 proposal 2 ike proposal 2 encryption-algorithm aes-cbc-128 dh group2 ipsec policy vpc 2 isakmp transform-set 2 security acl 3998 remote-address 123.56.99.4 ike-profile 2 ipsec transform-set 2 esp encryption-algorithm aes-cbc-128 esp authentication-algorithm sha1 pfs dh-group2 ipsec sa global-duration time-based 7200 acl advanced 3998 description to-yiqishuo-ipsecvpn rule 0 permit ip source 172.16.0.0 0.0.240.255 destination 10.192.0.0 0.0.255.255 interface GigabitEthernet0/2 ip address 114.242.236.151 255.255.255.128 ipsec apply policy vpc [BJ-Router-H3C-MSR3640]display ipsec policy vpc ------------------------------------------- IPsec Policy: vpc Interface: GigabitEthernet0/2 ------------------------------------------- ----------------------------- Sequence number: 1 Mode: ISAKMP ----------------------------- Traffic Flow Confidentiality: Disabled Security data flow: 3999 Selector mode: standard Local address: Remote address: 39.105.136.12 Transform set: 1 IKE profile: 1 IKEv2 profile: smart-link policy: SA trigger mode: Traffic-based SA duration(time based): 3600 seconds SA duration(traffic based): 1843200 kilobytes SA soft-duration buffer(time based): -- SA soft-duration buffer(traffic based): -- SA idle time: -- ----------------------------- Sequence number: 2 Mode: ISAKMP ----------------------------- Traffic Flow Confidentiality: Disabled Security data flow: 3998 Selector mode: standard Local address: Remote address: 123.56.99.4 Transform set: 2 IKE profile: 2 IKEv2 profile: smart-link policy: SA trigger mode: Traffic-based SA duration(time based): 7200 seconds SA duration(traffic based): 1843200 kilobytes SA soft-duration buffer(time based): -- SA soft-duration buffer(traffic based): -- SA idle time: --