同一交换机两个网段能互ping通,但访问不了web服务。

同一交换机有两个网段 192.168.14.0/24 vlan 14  和192.168.20.0/24 vlan 20 两个网段可以ping通，vlan14网段一台电脑主机开了web服务端口号8008，同网段可以访问，但是vlan 20内的主机访问不了vlan14内的这台web服务器，请问是交换机默认所有基于端口的互访关掉了吗？要如何设置才能让两个网段基于端口的服务可以互通      

version 5.20, Release 1513P15

 # sysname H3C

 # irf mac-address persistent timer irf auto-update enable undo irf link-delay

 # domain default enable system

 # vlan 1 

# vlan 14

 # vlan 20 to 22 

# vlan 30 

# vlan 60 

 # domain system access-limit disable state active idle-cut disable self-service-url disable

 # dhcp server ip-pool vlan14 network 192.168.14.0 mask 255.255.255.0 gateway-list 192.168.14.1 dns-list 192.168.1.2 202.96.128.86 120.196.165.24 8.8.8.8 expired day 0 hour 8

 # dhcp server ip-pool vlan20 network 192.168.20.0 mask 255.255.255.0 gateway-list 192.168.20.1 dns-list 192.168.1.2 202.96.128.86 120.196.165.24 8.8.8.8 expired day 0 hour 8 

# dhcp server ip-pool vlan21 network 192.168.21.0 mask 255.255.255.0 gateway-list 192.168.21.1 dns-list 192.168.1.2 202.96.128.86 120.196.165.24 8.8.8.8 expired day 0 hour 8

 # dhcp server ip-pool vlan30 network 192.168.30.0 mask 255.255.255.0 gateway-list 192.168.30.1 dns-list 192.168.1.2 202.96.128.86 120.196.165.24 8.8.8.8 expired day 0 hour 8

 # dhcp server ip-pool vlan60 network 192.168.60.0 mask 255.255.255.0 gateway-list 192.168.60.1 dns-list 192.168.1.2 202.96.128.86 120.196.165.24 8.8.8.8 expired day 0 hour 8 

 # interface NULL0 # interface Vlan-interface1 ip address 192.168.1.5 255.255.255.0

 # interface Vlan-interface14 ip address 192.168.14.1 255.255.255.0

 # interface Vlan-interface20 ip address 192.168.20.1 255.255.255.0 

# interface Vlan-interface21 ip address 192.168.21.1 255.255.255.0

 # interface Vlan-interface30 ip address 192.168.30.1 255.255.255.0 

# interface Vlan-interface60 ip address 192.168.60.1 255.255.255.0

 # interface GigabitEthernet1/0/1 

# interface GigabitEthernet1/0/2 

# interface GigabitEthernet1/0/3 port access vlan 20 

# interface GigabitEthernet1/0/4 port access vlan 20

 # interface GigabitEthernet1/0/5 port access vlan 20

# interface GigabitEthernet1/0/6 port access vlan 20 

# interface GigabitEthernet1/0/7 port access vlan 20

 # interface GigabitEthernet1/0/8 port access vlan 20

 # interface GigabitEthernet1/0/9 port access vlan 20 

# interface GigabitEthernet1/0/10 port access vlan 20

 # interface GigabitEthernet1/0/11 port access vlan 21 

# interface GigabitEthernet1/0/12 

# interface GigabitEthernet1/0/13 

# interface GigabitEthernet1/0/14

# interface GigabitEthernet1/0/15 

# interface GigabitEthernet1/0/16

 # interface GigabitEthernet1/0/17 

# interface GigabitEthernet1/0/18

 # interface GigabitEthernet1/0/19 port access vlan 21 

# interface GigabitEthernet1/0/20 port access vlan 21 

# interface GigabitEthernet1/0/21 port access vlan 21

 # interface GigabitEthernet1/0/22

 # interface GigabitEthernet1/0/23 port access vlan 14 

# interface GigabitEthernet1/0/24 

# interface GigabitEthernet1/0/25 

# interface GigabitEthernet1/0/26 

 interface GigabitEthernet1/0/27

# interface GigabitEthernet1/0/28 

# ip route-static 0.0.0.0 0.0.0.0 192.168.1.1

 # dhcp server forbidden-ip 192.168.14.1 192.168.14.99 dhcp server forbidden-ip 192.168.20.1 192.168.20.99 dhcp server forbidden-ip 192.168.21.1 192.168.21.99 dhcp server forbidden-ip 192.168.30.1 192.168.30.99 dhcp server forbidden-ip 192.168.60.1 192.168.60.99

 # dhcp enable

 # load tr069-configuration

 # user-interface aux 0 user-interface vty 0 4 authentication-mode scheme user-interface vty 5 15