win2000+remote-----adsl--ISP----netscreen-100-----内网 WIN2000上要设内网地址? 我做了之后，一直出错： 11:34:43.564 Incorrect Phase 1 ID type (expected ID_DER_ASN1_DN): 11:34:43.564 received ID IP ADDR=201.x.55.125 11:34:43.594 No matching Phase 1 ID received for Policy Entry My Connections\lzx. 11:34:43.594 My Connections\lzx - SENDING>>>> ISAKMP OAK INFO (HASH, NOTIFY:INVALID_ID_INFO) 11:34:43.604 My Connections\lzx - Discarding IKE SA negotiation 11:34:43.604 MY COOKIE af a4 a0 5 19 29 c0 c0 11:34:43.604 HIS COOKIE 3 63 da 2 fa f1 2f 1e 11:34:44.285 11:34:44.295 My Connections\lzx - Initiating IKE Phase 1 (IP ADDR=211.97.55.125) 11:34:44.355 My Connections\lzx - SENDING>>>> ISAKMP OAK AG (SA, KE, NON, ID, VID, VID, VID, VID) 11:34:46.648 My Connections\lzx - RECEIVED<<< ISAKMP OAK AG (SA, VID, KE, NON, ID, HASH) 11:34:46.648 My Connections\lzx - Received message for non-active SA 11:34:47.550 My Connections\lzx - RECEIVED<<< ISAKMP OAK AG (SA, VID, KE, NON, ID, HASH) 11:34:47.550 My Connections\lzx - Received message for non-active SA 11:34:47.550 My Connections\lzx - message not received! Retransmitting! 11:34:47.550 My Connections\lzx - SENDING>>>> ISAKMP OAK AG (Retransmission) 11:34:47.550 My Connections\lzx - RECEIVED<<< ISAKMP OAK AG (SA, VID, KE, NON, ID, HASH) 11:34:47.550 My Connections\lzx - Received message for non-active SA 11:34:50.654 My Connections\lzx - message not received! Retransmitting! 11:34:50.654 My Connections\lzx - SENDING>>>> ISAKMP OAK AG (Retransmission) 11:34:50.654 My Connections\lzx - RECEIVED<<< ISAKMP OAK AG (SA, VID, KE, NON, ID, HASH) 11:34:50.654 My Connections\lzx - Received message for non-active SA 11:34:50.664 My Connections\lzx - RECEIVED<<< ISAKMP OAK AG (SA, VID, KE, NON, ID, HASH) 11:34:50.664 Incorrect Phase 1 ID type (expected ID_DER_ASN1_DN): 11:34:50.664 received ID IP ADDR=201.x.55.125 11:34:50.694 No matching Phase 1 ID received for Policy Entry My Connections\lzx. 11:34:50.694 My Connections\lzx - SENDING>>>> ISAKMP OAK INFO (HASH, NOTIFY:INVALID_ID_INFO) 11:34:50.694 My Connections\lzx - Discarding IKE SA negotiation 11:34:50.694 MY COOKIE c8 ba 57 d7 7e 60 f5 30 11:34:50.694 HIS COOKIE b1 f7 80 96 26 cb 0 e2 11:34:51.555 My Connections\lzx - RECEIVED<<< ISAKMP OAK AG (SA, VID, KE, NON, ID, HASH) 11:34:51.555 My Connections\lzx - Received message for non-active SA 11:34:51.555 My Connections\lzx - RECEIVED<<< ISAKMP OAK AG (SA, VID, KE, NON, ID, HASH) 11:34:51.555 My Connections\lzx - Received message for non-active SA 11:34:54.650 My Connections\lzx - RECEIVED<<< ISAKMP OAK AG (SA, VID, KE, NON, ID, HASH) 11:34:54.650 My Connections\lzx - Received message for non-active SA 11:34:54.660 My Connections\lzx - RECEIVED<<< ISAKMP OAK AG (SA, VID, KE, NON, ID, HASH) 11:34:54.660 My Connections\lzx - Received message for non-active SA 拜托别让我再去找了，论坛里也找过了，没有 Edited by - sglzx on 05/27/2003 12:06:03

确认如下设置是否正确：

1、客户端的加密、验证算法是否和NS100上的加密、验证算法是否一致。
2、preshared-key是否一致（如果是IKE用户）
3、在防火墙的访问策略设置是否正确

这个能不能实现我不好说,但要想实现一定会有人做到!

)("hnci) rrz()= qsui)%

怎么全是英文啊,看都看不懂,就更不知道能不能实现了.