MSR830 VLAN内windows可以正常访问，centos访问不正常

好像不支持附件的上传，部分配置如下，一行行手工换行好累啊。。。

# version 5.20, Release 2516P19 

# 

acl number 3000 

rule 0 deny ip source 192.168.20.0 0.0.0.255 

 rule 5 permit ip

 acl number 3001 

 rule 5 permit ip source 10.0.0.0 0.255.255.255 destination 192.168.9.0 0.0.0.255 

 rule 10 permit ip source 192.168.10.0 0.0.0.255 destination 192.168.9.0 0.0.0.255

 rule 15 permit ip source 192.168.20.0 0.0.0.255 destination 192.168.9.0 0.0.0.255 

acl number 3002  

rule 0 permit ip source 192.168.10.0 0.0.0.255 destination 192.168.30.0 0.0.0.255 

rule 5 permit ip source 10.0.0.0 0.255.255.255 destination 192.168.30.0 0.0.0.255 

 acl number 3040

 rule 0 permit ip destination 192.168.10.0 0.0.0.255

 rule 5 deny ip 

acl number 3050

 rule 0 deny ip destination 192.168.4.0 0.0.0.255

 rule 5 deny ip destination 192.168.20.0 0.0.0.255 

# 

vlan 1 

# 

vlan 2 to 4 

#

 ike peer company_ipsec 

 proposal 1 pre-shared-key cipher $c$3$nN9PgqUKLxYibey1leCpN8CV3vSE6xuTwjs540ZS

 remote-address 83.36.171.102 

 local-address 39.129.4.172 

 nat traversal dpd company_ipsec ipsec transform-set company_ipsec encapsulation-mode tunnel transform esp esp authentication-algorithm md5 esp encryption-algorithm 3des

 #

 ipsec policy 1048577 1 isakmp 

 connection-name company_ipsec

 security acl 3001

 pfs dh-group2 ike-peer company_ipsec transform-set company_ipsec sa duration traffic-based 1843200 sa duration time-based 28800

 # 

dhcp server ip-pool vlan1 extended 

 network ip range 192.168.20.1 192.168.20.119 

 network mask 255.255.255.0 

 gateway-list 192.168.20.1 

 dns-list 192.168.20.1 

# 

dhcp server ip-pool vlan2 extended

 network ip range 192.168.5.1 192.168.5.254 

 network mask 255.255.255.0 

 gateway-list 192.168.5.1 

 dns-list 192.168.5.1 

# 

dhcp server ip-pool vlan3 extended 

 network ip range 192.168.4.1 192.168.4.254 

 network mask 255.255.255.0 

 gateway-list 192.168.4.1 

 dns-list 192.168.4.1 

# 

dhcp server ip-pool vlan4 extended 

 network ip range 192.168.10.1 192.168.10.254 

 network mask 255.255.255.0 

 gateway-list 192.168.10.1 

dns-list 192.168.10.1 

 attack-defense policy 86 interface GigabitEthernet0/1  

signature-detect action drop-packet signature-detect fraggle enable signature-detect land enable signature-detect winnuke enable signature-detect tcp-flag enable signature-detect icmp-unreachable enable signature-detect icmp-redirect enable signature-detect tracert enable signature-detect smurf enable signature-detect source-route enable signature-detect route-record enable signature-detect large-icmp enable defense scan enable defense scan add-to-blacklist defense syn-flood enable defense syn-flood action drop-packet defense udp-flood enable defense udp-flood action drop-packet defense icmp-flood enable defense icmp-flood action drop-packet 

#

 interface Vlan-interface1 

 ip address 192.168.20.1 255.255.255.0

 tcp mss 1024 

 dhcp server apply ip-pool vlan1 

 ip flow-ordering internal 

# 

interface Vlan-interface2 

 ip address 192.168.5.1 255.255.255.0

 dhcp server apply ip-pool vlan2

 mac-address 9ce8-95fb-a876  

firewall packet-filter 3050 inbound 

#

 interface Vlan-interface3 

 ip address 192.168.4.1 255.255.255.0 

 dhcp server apply ip-pool vlan3 

 mac-address 9ce8-95fb-a877  

firewall packet-filter 3040 inbound

 # interface Vlan-interface4 

 ip address 192.168.10.1 255.255.255.0

 dhcp server apply ip-pool vlan4 

# 

 interface GigabitEthernet0/1 

 port link-mode route 

 nat outbound 3000

 ip address 39.129.4.172 255.255.255.128 

 ipsec no-nat-process enable ipsec policy 1048577 attack-defense apply policy 86 dns server 211.139.29.150 dns server 211.139.29.170 ip flow-ordering external 

# 

interface GigabitEthernet0/5 

 port link-mode bridge 

 port access vlan 4 

# 

interface GigabitEthernet0/6 

 port link-mode bridge 

 port access vlan 2

 # 

interface GigabitEthernet0/7 

 port link-mode bridge 

 port access vlan 3 

#

 ip route-static 0.0.0.0 0.0.0.0 GigabitEthernet0/1 139.189.2.165  

ip route-static 10.0.0.0 255.0.0.0 GigabitEthernet0/0 10.23.228.1 

preference 1 

return