WA4620i-ACN，胖AP上网配置，可连接内网，无法打开网页

第一次提问，不知问题能否描述清楚。

公司网络，S5120上接ER3100连接外网，S5120分配多个Vlan，包含AC与几个瘦AP，正常上网。

把一个WA4620i刷成Fat AP，想设置通过S5120分配的Vlan上网。胖AP通过快速设置可以正常上网，分配的地址是上级Vlan的地址。

想重新设置模仿普通家用路由器上网，在AP端设置了Vlan，设置了路由，结果可以连接公司内网，无法打开网页。

另起炉灶，在AP上设置了NAT，现象一样，还是可连接内网交换机，路由器，无法打开网页。

只好求助。贴的是有NAT的配置。试了一天了，白手起家，实在不懂。公司的网络也是我配置的。谢谢了！

#

 version 5.20, Release 1508P03

#

 sysname WA4620i-ACN

#

 domain default enable system 

#

 telnet server enable 

#

 port-security enable 

#

 password-recovery enable

#

 undo attack-defense tcp fragment enable

#

acl number 2000

 rule 0 permit source 192.168.100.0 0.0.0.255 

#

vlan 1

#

vlan 100

#

vlan 200

#

domain system 

 access-limit disable

 state active 

 idle-cut disable 

 self-service-url disable 

#

dhcp server ip-pool 100

 network 192.168.100.0 mask 255.255.255.0

 gateway-list 192.168.100.1 

#

dhcp server ip-pool 200

 network 192.168.200.0 mask 255.255.255.0

 gateway-list 192.168.200.1 

 expired day 1 hour 8

#

user-group system

 group-attribute allow-guest

#

local-user admin

 password cipher $c$3$BQBc3pBdquIXBar0RjXLhuUaR8X25NQ1JD1SFR0=

 authorization-attribute level 3

 service-type telnet

 service-type web

#

wlan rrm

 dot11a mandatory-rate 6 12 24 

 dot11a supported-rate 9 18 36 48 54 

 dot11b mandatory-rate 1 2 

 dot11b supported-rate 5.5 11 

 dot11g mandatory-rate 1 2 5.5 11 

 dot11g supported-rate 6 9 12 18 24 36 48 54 

#

wlan service-template 1 crypto

 ssid Z-Home

 vlan 100

 cipher-suite ccmp

 security-ie rsn

 security-ie wpa

 service-template enable

#

wlan service-template 2 crypto

 ssid Z-Guest

 cipher-suite ccmp

 security-ie rsn

 security-ie wpa

 service-template enable

#

interface NULL0

#

interface Vlan-interface1

 ip address dhcp-alloc

 nat outbound 2000

#

interface Vlan-interface100

 ip address 192.168.100.1 255.255.255.0 

#

interface Vlan-interface200

 ip address 192.168.200.1 255.255.255.0 

#

interface GigabitEthernet1/0/1

#

interface GigabitEthernet1/0/2

 port access vlan 100

#

interface WLAN-BSS32

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid pvid vlan 100

 port-security port-mode psk 

 port-security tx-key-type 11key 

 port-security preshared-key pass-phrase cipher $c$3$4eS+egSZkU7E4EaLv4FG5RGa6bg3z9vcqVlN

#

interface WLAN-BSS33

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid pvid vlan 100

 port-security port-mode psk 

 port-security tx-key-type 11key 

 port-security preshared-key pass-phrase cipher $c$3$4eS+egSZkU7E4EaLv4FG5RGa6bg3z9vcqVlN

#

interface WLAN-BSS34

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid pvid vlan 200

 port-security port-mode psk 

 port-security tx-key-type 11key 

 port-security preshared-key pass-phrase cipher $c$3$CdddAKHQ/vD3HQSvm9QkCZiQglg7mJbgXD7K

#

interface WLAN-BSS35

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid pvid vlan 200

 port-security port-mode psk 

 port-security tx-key-type 11key 

 port-security preshared-key pass-phrase cipher $c$3$CdddAKHQ/vD3HQSvm9QkCZiQglg7mJbgXD7K

#

interface WLAN-Radio1/0/1

 service-template 1 interface wlan-bss 32

 service-template 2 interface wlan-bss 34

#

interface WLAN-Radio1/0/2

 service-template 1 interface wlan-bss 33

 service-template 2 interface wlan-bss 35

#

 dhcp enable 

#

 arp-snooping enable

#

 load xml-configuration 

#

user-interface con 0