MSR930可ping通外网，但主机确ping不通外网

[H3C]display current-configuration 

 # 

version 5.20, Release 2514P10 

# 

 sysname H3C 

# 

 domain default enable system 

# 

dar p2p signature-file flash:/p2p_default.mtd # port-security enable 

# 

 password-recovery enable

 #

 acl number 2000 

 rule 0 permit source 10.0.0.0 0.0.0.255 

# 

vlan 1 

# 

domain system 

 access-limit disable 

 state active idle-cut disable

 self-service-url disable 

#

 dhcp server ip-pool dhcp_server

 network 10.0.0.0 mask 255.255.255.0 

 network ip range 10.0.0.101 10.0.0.199 

 dns-list 211.167.230.100 211.167.230.200 

#

 user-group system 

 group-attribute allow-guest 

# 

local-user admin password cipher $c$3$40gC1cxf/wIJNa1ufFPJsjKAof+QP5aV 

 authorization-attribute level 3 

 service-type telnet 

 service-type web 

# 

cwmp undo cwmp enable 

#

 interface Aux0 

 async mode flow 

 link-protocol ppp 

# 

interface Cellular0/0 

 async mode protocol 

 link-protocol ppp 

# 

interface NULL0 

#

 interface Vlan-interface1

 ip address 10.0.0.1 255.255.255.0 

#

 interface GigabitEthernet0/0 

 port link-mode route 

 nat outbound 2000 

 ip address 121.69.113.150 255.255.255.240 

#

 interface GigabitEthernet0/1 

 port link-mode bridge 

#

 interface GigabitEthernet0/2 

 port link-mode bridge 

#

 interface GigabitEthernet0/3 

 port link-mode bridge 

# 

interface GigabitEthernet0/4 

 port link-mode bridge 

#

 ip route-static 0.0.0.0 0.0.0.0 GigabitEthernet0/0 121.69.113.145 

# 

dhcp enable 

# 

 load xml-configuration 

# 

 load tr069-configuration 

# 

user-interface tty 12

user-interface aux 0 

user-interface vty 0 4 

authentication-mode scheme 

# return 

GIGA0/0接公网设备【121.69.113.150/28】，GIGA0/1-0/3直接连接主机【10.0.0.0/24】。

comware Software, Version 5.20, Release 2514P10