SR6602-X1设备外网正常但无法访问个别网站

<6602-X>dis cu # version 5.20, Release 3302 # sysname 6602-X # ftp server enable # ip local policy-based-route aaa # domain default enable system # telnet server enable # lldp enable # password-recovery enable # acl number 2000 rule 0 permit source 172.1.1.0 0.0.0.255 rule 5 permit source 172.1.2.0 0.0.0.255 rule 10 permit source 172.1.3.0 0.0.0.255 rule 15 permit source 172.1.5.0 0.0.0.255 rule 20 permit source 172.1.6.0 0.0.0.255 rule 25 permit source 172.1.7.0 0.0.0.255 rule 30 permit source 172.1.8.0 0.0.0.255 rule 35 permit source 172.1.9.0 0.0.0.255 rule 40 permit source 172.1.10.0 0.0.0.255 rule 45 permit source 172.1.12.0 0.0.0.255 rule 50 permit source 172.1.13.0 0.0.0.255 rule 55 permit source 172.1.14.0 0.0.0.255 rule 60 permit source 172.1.15.0 0.0.0.255 rule 65 permit source 172.1.16.0 0.0.0.255 rule 70 permit source 172.1.17.0 0.0.0.255 rule 125 permit source 192.168.5.0 0.0.0.255 rule 130 permit source 192.168.6.0 0.0.0.255 rule 135 permit source 172.1.11.0 0.0.0.255 rule 175 permit source 192.168.2.0 0.0.0.255 rule 180 permit source 172.1.4.0 0.0.0.255 rule 185 permit source 172.1.18.0 0.0.0.255 rule 190 permit source 172.1.19.0 0.0.0.255 rule 195 permit source 172.1.20.0 0.0.0.255 rule 200 permit source 172.1.21.0 0.0.0.255 rule 205 permit source 172.1.22.0 0.0.0.255 rule 210 permit source 172.1.23.0 0.0.0.255 rule 215 permit source 172.1.24.0 0.0.0.255 rule 220 permit source 172.1.25.0 0.0.0.255 rule 225 permit source 172.1.26.0 0.0.0.255 rule 230 permit source 172.1.27.0 0.0.0.255 rule 235 permit source 172.1.28.0 0.0.0.255 rule 240 permit source 172.1.29.0 0.0.0.255 rule 245 permit source 172.1.34.0 0.0.0.255 rule 250 permit source 172.1.35.0 0.0.0.255 rule 255 permit source 172.1.46.0 0.0.0.255 # acl number 3000 rule 0 permit ip source 219.151.35.224 0 acl number 3100 rule 0 deny tcp destination-port eq 445 rule 5 deny tcp destination-port eq 3389 rule 10 permit tcp destination-port eq 9080 acl number 3333 rule 0 permit ip source 172.1.1.0 0.0.0.255 rule 5 permit ip source 172.1.2.0 0.0.0.255 rule 10 permit ip source 172.1.3.0 0.0.0.255 rule 15 permit ip source 172.1.4.0 0.0.0.255 rule 20 permit ip source 172.1.5.0 0.0.0.255 rule 25 permit ip source 172.1.6.0 0.0.0.255 rule 30 permit ip source 172.1.7.0 0.0.0.255 rule 35 permit ip source 172.1.8.0 0.0.0.255 rule 40 permit ip source 172.1.9.0 0.0.0.255 rule 45 permit ip source 172.1.10.0 0.0.0.255 rule 50 permit ip source 172.1.11.0 0.0.0.255 rule 55 permit ip source 172.1.12.0 0.0.0.255 rule 60 permit ip source 172.1.13.0 0.0.0.255 rule 65 permit ip source 172.1.14.0 0.0.0.255 rule 70 permit ip source 172.1.15.0 0.0.0.255 rule 75 permit ip source 172.1.16.0 0.0.0.255 rule 80 permit ip source 172.1.17.0 0.0.0.255 rule 85 permit ip source 172.1.18.0 0.0.0.255 rule 90 permit ip source 172.1.19.0 0.0.0.255 rule 95 permit ip source 172.1.20.0 0.0.0.255 rule 100 permit ip source 172.1.21.0 0.0.0.255 rule 105 permit ip source 172.1.22.0 0.0.0.255 rule 110 permit ip source 172.1.23.0 0.0.0.255 rule 115 permit ip source 172.1.24.0 0.0.0.255 rule 120 permit ip source 172.1.25.0 0.0.0.255 rule 125 permit ip source 172.1.26.0 0.0.0.255 rule 130 permit ip source 172.1.27.0 0.0.0.255 rule 135 permit ip source 172.1.28.0 0.0.0.255 rule 140 permit ip source 172.1.29.0 0.0.0.255 rule 145 permit ip source 172.1.30.0 0.0.0.255 rule 150 permit ip source 172.1.31.0 0.0.0.255 rule 155 permit ip source 172.1.32.0 0.0.0.255 rule 160 permit ip source 172.1.33.0 0.0.0.255 rule 165 permit ip source 172.1.34.0 0.0.0.255 rule 170 permit ip source 172.1.35.0 0.0.0.255 rule 175 permit ip source 172.1.36.0 0.0.0.255 rule 180 permit ip source 172.1.37.0 0.0.0.255 rule 185 permit ip source 172.1.38.0 0.0.0.255 rule 190 permit ip source 172.1.39.0 0.0.0.255 rule 195 permit ip source 172.1.40.0 0.0.0.255 rule 200 permit ip source 172.1.41.0 0.0.0.255 rule 205 permit ip source 172.1.42.0 0.0.0.255 rule 210 permit ip source 172.1.43.0 0.0.0.255 rule 215 permit ip source 172.1.44.0 0.0.0.255 rule 220 permit ip source 172.1.45.0 0.0.0.255 rule 225 permit ip source 172.1.46.0 0.0.0.255 rule 230 permit ip source 192.168.2.0 0.0.0.255 rule 235 permit ip source 192.168.3.0 0.0.0.255 rule 240 permit ip source 192.168.4.0 0.0.0.255 rule 245 permit ip source 192.168.5.0 0.0.0.255 rule 250 permit ip source 192.168.6.0 0.0.0.255 acl number 3999 rule 0 permit ip source 172.1.0.0 0.0.255.255 destination 192.168.2.4 0 # domain system access-limit disable state active idle-cut disable self-service-url disable # policy-based-route test permit node 10 if-match reverse-input-interface GigabitEthernet0/0/0 apply ip-address next-hop 219.151.35.1 # policy-based-route aaa permit node 5 if-match acl 3000 apply ip-address next-hop 219.151.35.1 # user-group system group-attribute allow-guest # local-user admin password cipher $c$3$ZoW4Umlnnc3JElswUGHdY7Bg4zcPOGKh15X+JHEF authorization-attribute level 3 service-type telnet service-type web # interface NULL0 # interface GigabitEthernet0/0/0 nat outbound 2000 nat server protocol tcp global 219.151.35.224 8088 inside 192.168.2.8 8088 ip address 219.151.35.224 255.255.255.0 ip address 219.151.35.119 255.255.255.0 sub # interface GigabitEthernet0/0/1 nat outbound 2000 nat server protocol tcp global 219.151.35.224 8088 inside 192.168.2.8 8088 ip address 172.1.1.1 255.255.255.0 ip policy-based-route test # interface GigabitEthernet0/0/2 nat outbound 2000 ip address 124.31.217.89 255.255.255.192 # interface GigabitEthernet0/0/3 # interface M-GigabitEthernet0/0/0 # nqa entry admin dianxin type icmp-echo destination ip 219.151.35.1 frequency 1000 reaction 1 checked-element probe-fail threshold-type consecutive 1 action-type trap-only route-option bypass-route # ip route-static 0.0.0.0 0.0.0.0 219.151.35.1 track 1 description dianxin ip route-static 0.0.0.0 0.0.0.0 124.31.217.65 preference 200 ip route-static 10.1.1.0 255.255.255.0 172.2.1.5 ip route-static 10.1.1.0 255.255.255.0 172.1.1.5 ip route-static 10.1.1.2 255.255.255.254 172.1.1.5 ip route-static 172.1.1.0 255.255.255.0 172.1.1.5 ip route-static 172.1.2.0 255.255.255.0 172.1.1.5 ip route-static 172.1.3.0 255.255.255.0 172.1.1.5 ip route-static 172.1.4.0 255.255.255.0 172.1.1.5 ip route-static 172.1.5.0 255.255.255.0 172.1.1.5 ip route-static 172.1.6.0 255.255.255.0 172.1.1.5 ip route-static 172.1.7.0 255.255.255.0 172.1.1.5 ip route-static 172.1.8.0 255.255.255.0 172.1.1.5 ip route-static 172.1.9.0 255.255.255.0 172.1.1.5 ip route-static 172.1.10.0 255.255.255.0 172.1.1.5 ip route-static 172.1.11.0 255.255.255.0 172.1.1.5 ip route-static 172.1.12.0 255.255.255.0 172.1.1.5 ip route-static 172.1.13.0 255.255.255.0 172.1.1.5 ip route-static 172.1.14.0 255.255.255.0 172.1.1.5 ip route-static 172.1.15.0 255.255.255.0 172.1.1.5 ip route-static 172.1.16.0 255.255.255.0 172.1.1.5 ip route-static 172.1.17.0 255.255.255.0 172.1.1.5 ip route-static 172.1.18.0 255.255.255.0 172.1.1.5 ip route-static 172.1.19.0 255.255.255.0 172.1.1.5 ip route-static 172.1.20.0 255.255.255.0 172.1.1.5 ip route-static 172.1.21.0 255.255.255.0 172.1.1.5 ip route-static 172.1.22.0 255.255.255.0 172.1.1.5 ip route-static 172.1.23.0 255.255.255.0 172.1.1.5 ip route-static 172.1.24.0 255.255.255.0 172.1.1.5 ip route-static 172.1.25.0 255.255.255.0 172.1.1.5 ip route-static 172.1.26.0 255.255.255.0 172.1.1.5 ip route-static 172.1.27.0 255.255.255.0 172.1.1.5 ip route-static 172.1.28.0 255.255.255.0 172.1.1.5 ip route-static 172.1.29.0 255.255.255.0 172.1.1.5 ip route-static 172.1.34.0 255.255.255.0 172.1.1.5 ip route-static 172.1.35.0 255.255.255.0 172.1.1.5 ip route-static 172.1.46.0 255.255.255.0 172.1.1.5 ip route-static 172.2.1.0 255.255.255.0 172.1.1.5 ip route-static 172.3.1.0 255.255.255.0 172.1.1.5 ip route-static 192.168.2.0 255.255.255.0 172.1.1.5 ip route-static 192.168.5.0 255.255.255.0 172.1.1.5 ip route-static 192.168.6.0 255.255.255.0 172.1.1.5 # track 1 nqa entry admin dianxin reaction 1 # nqa schedule admin dianxin start-time now lifetime forever # load xml-configuration # user-interface con 0 authentication-mode password set authentication password cipher $c$3$FYgDLGe9IZ1i/tsJy6tYhN3uAlAfVny7qdYgJfU8 user-interface aux 0 user-interface vty 0 4 authentication-mode scheme # return <6602-X>