我的ipsec-vpn怎么debug没反应啊，郁闷死了啊，救救我吧！

w2480211

   两边参数一样啊，acl配置的是对称的啊，可是debug crypto ipsec 和debug crypto isakmp打开 用扩展ping就是没反应，请求大哥们帮助呀，感激不尽！！！！！！！！！！     
crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
crypto isakmp key CCNP address 192.168.1.1
!
!
crypto ipsec transform-set SET esp-3des esp-md5-hmac
!
crypto map MAP 10 ipsec-isakmp
set peer 192.168.1.1
set transform-set SET
match address 100
!
!
!
!
interface Loopback0
ip address 2.2.2.2 255.255.255.0
!
interface Ethernet0/0
ip address 192.168.1.2 255.255.255.0
half-duplex
crypto map MAP
!
interface Ethernet0/1
no ip address
shutdown
half-duplex
!
interface Ethernet0/2
no ip address
shutdown
half-duplex
!
interface Ethernet0/3
no ip address
shutdown
half-duplex
!
ip http server
no ip http secure-server
ip classless
!
!
access-list 100 permit ip 2.2.2.0 0.0.0.255 1.1.1.0 0.0.0.255
outer#
Router#ping
Protocol [ip]:
Target IP address:
% Bad IP address
Router#
Router#ping
Protocol [ip]:
Target IP address: 1.1.1.1
Repeat count [5]:
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface: 2.2.2.2
Type of service [0]: y
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
Packet sent with a source address of 2.2.2.2
.....
Success rate is 0 percent (0/5)
Router#
Router#