阿里云与WOC对接的问题有人遇到过么

之前和某公司在测试的时候显示正常连接,但是目前上线的时候阿里的菜单有点变化,不过参数都还正常的.但是一直显示无法连接,第一阶段协商失败.

还有就是多网段阿里需要采用ikev2,我使用的是woc3050 6.0 sp3 这个版本的vpn能不能使用ikev2?

对接失败有什么日志信息提示吗，可以开日志调试，上面有详细的报错信息的

您好
问题1 第一阶段协商失败，通常是两边配置的参数不一致导致的，可以观察两端的日志提示（某公司端可打调试日志）；
问题2 目前只支持ikev1，如果需要支持ikev2 烦请联系当地某公司同事确认是否可以通过定制实现
谢谢

第一阶段协商失败-----这个一般就是配置的问题了

2018-05-08 16:56:46 09[CFG] received stroke: initiate 'vco-2zevvj9r7zqhrr7qbriu4'
2018-05-08 16:56:46 09[IKE] <vco-2zevvj9r7zqhrr7qbriu4|569> initiating Aggressive Mode IKE_SA vco-2zevvj9r7zqhrr7qbriu4[569] to 39.105.87.111
2018-05-08 16:56:46 09[ENC] <vco-2zevvj9r7zqhrr7qbriu4|569> generating AGGRESSIVE request 0 [ SA KE No ID V V V V V ]
2018-05-08 16:56:46 09[NET] <vco-2zevvj9r7zqhrr7qbriu4|569> sending packet: from 10.7.7.199[500] to 39.105.87.111[500] (394 bytes)
2018-05-08 16:56:46 14[NET] <vco-2zevvj9r7zqhrr7qbriu4|569> received packet: from 39.105.87.111[500] to 10.7.7.199[500] (56 bytes)
2018-05-08 16:56:46 14[ENC] <vco-2zevvj9r7zqhrr7qbriu4|569> parsed INFORMATIONAL_V1 request 3252925746 [ N(AUTH_FAILED) ]
2018-05-08 16:56:46 14[IKE] <vco-2zevvj9r7zqhrr7qbriu4|569> received AUTHENTICATION_FAILED error notify
2018-05-08 17:02:17 06[CFG] received stroke: terminate 'vco-2zevvj9r7zqhrr7qbriu4'
2018-05-08 17:02:17 06[CFG] no IKE_SA named 'vco-2zevvj9r7zqhrr7qbriu4' found
2018-05-08 17:02:17 13[CFG] received stroke: terminate 'vco-2zevvj9r7zqhrr7qbriu4'
2018-05-08 17:02:17 13[CFG] no IKE_SA named 'vco-2zevvj9r7zqhrr7qbriu4' found
2018-05-08 17:02:23 12[CFG] received stroke: terminate 'vco-2zevvj9r7zqhrr7qbriu4'
2018-05-08 17:02:23 12[CFG] no IKE_SA named 'vco-2zevvj9r7zqhrr7qbriu4' found
2018-05-08 17:02:23 08[CFG] received stroke: terminate 'vco-2zevvj9r7zqhrr7qbriu4'
2018-05-08 17:02:23 08[CFG] no IKE_SA named 'vco-2zevvj9r7zqhrr7qbriu4' found
2018-05-08 17:02:23 13[CFG] received stroke: initiate 'vco-2zevvj9r7zqhrr7qbriu4'
2018-05-08 17:02:23 13[IKE] <vco-2zevvj9r7zqhrr7qbriu4|571> initiating Aggressive Mode IKE_SA vco-2zevvj9r7zqhrr7qbriu4[571] to 39.105.87.111
2018-05-08 17:02:23 13[ENC] <vco-2zevvj9r7zqhrr7qbriu4|571> generating AGGRESSIVE request 0 [ SA KE No ID V V V V V ]
2018-05-08 17:02:23 13[NET] <vco-2zevvj9r7zqhrr7qbriu4|571> sending packet: from 10.7.7.199[500] to 39.105.87.111[500] (394 bytes)
2018-05-08 17:02:23 07[NET] <vco-2zevvj9r7zqhrr7qbriu4|571> received packet: from 39.105.87.111[500] to 10.7.7.199[500] (56 bytes)
2018-05-08 17:02:23 07[ENC] <vco-2zevvj9r7zqhrr7qbriu4|571> parsed INFORMATIONAL_V1 request 2611919880 [ N(AUTH_FAILED) ]
2018-05-08 17:02:23 07[IKE] <vco-2zevvj9r7zqhrr7qbriu4|571> received AUTHENTICATION_FAILED error notify
2018-05-08 17:02:23 09[CFG] received stroke: terminate 'vco-2zevvj9r7zqhrr7qbriu4'
2018-05-08 17:02:23 09[CFG] no IKE_SA named 'vco-2zevvj9r7zqhrr7qbriu4' found
2018-05-08 17:02:46 10[CFG] received stroke: initiate 'vco-2zevvj9r7zqhrr7qbriu4'
2018-05-08 17:02:46 10[IKE] <vco-2zevvj9r7zqhrr7qbriu4|573> initiating Aggressive Mode IKE_SA vco-2zevvj9r7zqhrr7qbriu4[573] to 39.105.87.111
2018-05-08 17:02:46 10[ENC] <vco-2zevvj9r7zqhrr7qbriu4|573> generating AGGRESSIVE request 0 [ SA KE No ID V V V V V ]
2018-05-08 17:02:46 10[NET] <vco-2zevvj9r7zqhrr7qbriu4|573> sending packet: from 10.7.7.199[500] to 39.105.87.111[500] (394 bytes)
2018-05-08 17:02:46 11[NET] <vco-2zevvj9r7zqhrr7qbriu4|573> received packet: from 39.105.87.111[500] to 10.7.7.199[500] (56 bytes)
2018-05-08 17:02:46 11[ENC] <vco-2zevvj9r7zqhrr7qbriu4|573> parsed INFORMATIONAL_V1 request 1891998329 [ N(AUTH_FAILED) ]
2018-05-08 17:02:46 11[IKE] <vco-2zevvj9r7zqhrr7qbriu4|573> received AUTHENTICATION_FAILED error notify
2018-05-08 17:03:46 15[CFG] received stroke: initiate 'vco-2zevvj9r7zqhrr7qbriu4'
2018-05-08 17:03:46 15[IKE] <vco-2zevvj9r7zqhrr7qbriu4|575> initiating Aggressive Mode IKE_SA vco-2zevvj9r7zqhrr7qbriu4[575] to 39.105.87.111
2018-05-08 17:03:46 15[ENC] <vco-2zevvj9r7zqhrr7qbriu4|575> generating AGGRESSIVE request 0 [ SA KE No ID V V V V V ]
2018-05-08 17:03:46 15[NET] <vco-2zevvj9r7zqhrr7qbriu4|575> sending packet: from 10.7.7.199[500] to 39.105.87.111[500] (394 bytes)
2018-05-08 17:03:46 11[NET] <vco-2zevvj9r7zqhrr7qbriu4|575> received packet: from 39.105.87.111[500] to 10.7.7.199[500] (56 bytes)
2018-05-08 17:03:46 11[ENC] <vco-2zevvj9r7zqhrr7qbriu4|575> parsed INFORMATIONAL_V1 request 1269156078 [ N(AUTH_FAILED) ]
2018-05-08 17:03:46 11[IKE] <vco-2zevvj9r7zqhrr7qbriu4|575> received AUTHENTICATION_FAILED error notify
===========================以上是阿里的日志,我看不懂...==========================
=================以下是某公司的日志,看起来是网络不通,2个月前我测试的时候都是通的============
1 DLAN总部 调试 17:07:31 [Isakmp_Server]请检查网络是否连通.如果连通.请检查[hb2-bj]的高级设置里面的各项是否和对方一致.
2 DLAN总部 告警 17:07:31 [Isakmp_Server]和网关[hb2-bj]的第一阶段SA 协商失败,连接建立失败.
3 DLAN总部 信息 17:06:31 [Isakmp_Server]和网关[hb2-bj](IP:39.105.87.111) 进行NAT-T探测.
4 DLAN总部 信息 17:06:31 [Isakmp_Server]开始和网关[hb2-bj](IP:39.105.87.111) 进行野蛮模式协商.
5 DLAN总部 调试 17:06:31 Start to CreateIsakmpSA for hb2-bj,ip=39.105.87.111
6 DLAN总部 调试 17:06:31 Ipsec Out IP = 61.188.37.66
7 DLAN总部 信息 17:06:24 [Isakmp_Server]和网关[hb2-bj](IP:39.105.87.111) 进行NAT-T探测.
8 DLAN总部 信息 17:06:24 [Isakmp_Server]开始和网关[hb2-bj](IP:39.105.87.111) 进行野蛮模式协商.
9 DLAN总部 调试 17:06:24 Start to CreateIsakmpSA for hb2-bj,ip=39.105.87.111

您好，您的问题是否已经解决，看您的日志：第一阶段SA 协商失败,连接建立失败.
请确认2端信息是否完全一致。
1、核对设备配置，【VPN配置】-【第三方对接】-【第一阶段】配置参数信息是否和第三方设备一致
2、【VPN配置】-【查看设备的系统日志，【系统管理】-【系统诊断】-【系统日志】-【日志选项设置】-勾选上【显示选项】的所有功能-在【请勾选要显示日志的程序】中仅勾选【DLAN总部】，根据日志来进行判断

备注：
1、两边vpn设备如果当中有nat环境的话，必须用【VPN配置】-【第三方对接】-【第一阶段】-新增的条目里面【高级选项】-【支持模式】，选择【野蛮模式】
2、主模式默认只支持ip地址作为身份id，某公司vpn野蛮模式默认只支持FQDN作为身份id（但是dlan是5.x以及以上开始支持野蛮模式可以用ip地址作为身份id
3、某公司vpn只支持第一阶段是用ike version1的协议版本，不支持ike version 2的版本

一起来学习，一起来学习

感谢分享，学习一下~