防火墙1060，和Juniper-SSG 进行ipsec vpn对接，

有谁做过，h3c接Juniper 

是不是加密方式相同，秘钥相同就可以建立隧道了

IDC-SSG550# 基于路由

  set zone id 106 "HDQD"

 unset zone HDQD tcp-rst

 set interface "tunnel.11" zone HDQD

 set interface tunnel.11 ip unnumbered interface ethernet0/2

 set address "HDQD" "10.5.0.0/16" 10.5.0.0 255.255.0.0

set ike p1-proposal “P1-Prop” preshare group2 esp 3des sha-1 second 28800

 set ike p2-proposal “P2-Porp” group1 esp 3des sha-1 second 3600 

set ike gateway "IDC HDQD" address y.y.y.y Main outgoing-interface e0/2 preshare “xxxxxx” proposal P1-Prop

 set vpn "IDC HDQD" gateway "IDC HDQD" no-replay tunnel idletime 0 proposal P2-Porp

set ike gateway "IDC HDQD" address y.y.y.y Main outgoing-interface e0/2 preshare "xxxxxxxx" proposal “pre-g2-3des-sha”

set vpn "IDC HDQD" gateway "IDC HDQD" no-replay tunnel idletime 0 proposal “nopfs-esp-3des-sha”

set vpn "IDC HDQD" monitor

set vpn "IDC HDQD" bind interface tunnel.11

unset interface tunnel.11 acvpn-dynamic-routing

set policy id 75

set src-address "y.y.y.y"

set policy id 88 from "Trust" to "HDQD" "10.0.0.0/16" "10.5.0.0/16" any permit log 

set policy id 89 from "HDQD" to "Trust" "10.5.0.0/16" "10.0.0.0/16" any permit log

 set policy id 90 from "AthenaSH" to "HDQD" "10.100.0.0/16" "10.5.0.0/16" any permit log

 set policy id 91 from "HDQD" to "AthenaSH" "10.5.0.0/16" "10.100.0.0/16" any permit log

 set policy id 92 from "VPN-HDSH" to "HDQD" "10.3.0.0/16" "10.5.0.0/16" any permit log

 set policy id 93 from "HDQD" to "VPN-HDSH" "10.5.0.0/16" "10.3.0.0/16" any permit log

 set policy id 94 from "VPN-HDNB2" to "HDQD" "10.1.0.0/16" "10.5.0.0/16" any permit log

 set src-address "10.2.0.0/16" set policy id 95 from "HDQD" to "VPN-HDNB2" "10.5.0.0/16" "10.1.0.0/16" any permit log

 set dst-address "10.2.0.0/16" set policy id 96 from "athenahz" to "HDQD" "10.102.0.0/16" "10.5.0.0/16" any permit log

 set policy id 97 from "HDQD" to "athenahz" "10.5.0.0/16" "10.102.0.0/16" any permit log

 set policy id 98 from “HDQD” to “HDBJ” “10.5.0.0/16” “10.4.0.0/16” any permit log

 set policy id 99 from “HDBJ” to “HDQD” “10.4.0.0/16” “10.5.0.0/16” any permit log

 set route 10.5.0.0/16 interface tunnel.11