如图所示,两台安全网关的配置分别为:RTA[RTA]ikepeer123[RTA-ike-peer-123]pre-shared-kesimple123[RTA-ike-peer-123]remote-address10.2.1.2[RTA-ike-peer-123]local-address10.2.1.1[RTA-ike-peer-123]quit[RTA]ipsecproposal1[RTA-ipsec-proposal-1]quit[RTA]aclnumber3000[RTA-acl-adv-3000]rule0permitipsource10.1.1.00.0.0.255destination10.3.1.00.0.0.255[RTA]ipsecpolic11isakmp[RTA-ipsec-polic-isakmp-1-1]securitacl3000[RTA-ipsec-polic-isakmp-1-1]ike-peer123[RTA-ipsec-polic-isakmp-1-1]proposal1[RTA-ipsec-polic-isakmp-1-1]quit[RTA]interfaceSerial0/2/1[RTA-Serial0/2/1]ipaddress10.2.1.1255.255.255.0[RTA-Serial0/2/1]ipsecpolic1[RTA]interfaceEthernet0/1/0[RTA-Serial0/2/1]ipaddress10.1.1.2255.255.255.0RTB:[RTB]ikepeer123[RTB-ike-peer-123]pre-shared-kesimple123[RTB-ike-peer-123]remote-address10.2.1.1[RTB-ike-peer-123]local-address10.2.1.2[RTB-ike-peer-123]quit[RTB]ipsecproposal1[RTB-ipsec-proposal-1]quit[RTB]aclnumber3000[RTB-acl-adv-3000]rule0permitipsource10.1.1.00.0.0.255destination10.3.1.0.0.0.0.255[RTB]ipsecpolic11isakmp[RTB-ipsec-polic-isakmp-1-1]securitacl3000[RTB-ipsec-polic-isakmp-1-1]ike-peer123[RTB-ipsec-polic-isakmp-1-1]proposal1[RTB-ipsec-polic-isakmp-1-1]quitRTB]interfaceSerial0/2/1[RTB-Serial0/2/1]ipaddress10.2.1.2255.255.255.0[RTB-Serial0/2/1]]ipsecpolic1[RTA]interfaceEthernet0/1/0[RTA-Serial0/2/1]ipaddress10.1.3.1255.255.255.0由此可知()。
A.任何一方发起的SA协商都可以成功
B.任何一方发起的SA协商都不能成功
C.只有从RTA向RTB发起的SA协商才可以成功
D.只有从RTB向RTA发起的SA协商才可以成功