F100-C-A防火墙配置

防火墙外网PPPOE  外网口为1/0/0口 ，内网为1/0/6口

已经正常配置完成，内网电脑已经可以正常上网

通过telnet到防火墙后 配置DNS为：223.5.5.5

问题：防火墙无通过TELNET上去后无法PING通 外网 也无法解析域名

配置如下：

[H3C]dis cu

#

 version 7.1.064, Release 9560P40

#

 sysname H3C

#

#

interface Dialer0

 ppp chap password cipher --------------------

 ppp chap user 043114149279 

 ppp pap local-user 043114149279 password cipher--------------------

 dialer bundle enable

 dialer timer idle 0

 ip address ppp-negotiate

 nat outbound

#

#

interface GigabitEthernet1/0/0

 port link-mode route

 pppoe-client dial-bundle-number 0

#

interface GigabitEthernet1/0/1

 port link-mode route

#

interface GigabitEthernet1/0/2

 port link-mode route

#

interface GigabitEthernet1/0/3

 port link-mode route

#

interface GigabitEthernet1/0/4

 port link-mode route

#

interface GigabitEthernet1/0/5

 port link-mode route

#

interface GigabitEthernet1/0/6

 port link-mode route

 description ----LAN----

 ip address 192.168.1.254 255.255.255.0

 manage http inbound

 manage https inbound

 manage ping inbound

 manage telnet inbound

#

interface GigabitEthernet1/0/7

#

security-zone name Local

#

security-zone name Trust

 import interface GigabitEthernet1/0/6

 import interface GigabitEthernet1/0/7

#

security-zone name DMZ

#

security-zone name Untrust

 import interface Dialer0

 import interface GigabitEthernet1/0/0

#

security-zone name Management

#

zone-pair security source Trust destination Untrust

#

#

 ip route-static 0.0.0.0 0 Dialer0

#

security-policy ip

 rule 0 name pass-0

  action pass

  source-zone Trust

  destination-zone Untrust

#

 cloud-management server domain secops.h3c.com

#