策略路由 不能访问管理交换机IP

acl number 2001
 rule 5 permit source 0.0.0.1 255.255.255.254

acl number 3000
 rule 10 deny ip source 192.168.100.0 0.0.0.255
 rule 20 permit ip

vlan 1

vlan 10

vlan 20

vlan 30

vlan 40

vlan 50

vlan 60

vlan 70

vlan 80

vlan 90
 description menjin

vlan 100
 description AP

vlan 130
 description -1f-wlan

vlan 200
 description wenjian-huchuang

vlan 1000
 description manager-device

policy-based-route pbr permit node 10
 if-match acl 2001
 apply output-interface Dialer11

interface Dialer10
 nat outbound 3000
  link-protocol ppp
 ppp chap user 280019305509
 ppp chap password cipher
 ppp pap local-user
 ppp ipcp dns admit-any
 ppp ipcp dns request
 mtu 1492
 ip address ppp-negotiate
 tcp mss 1024
 dialer user username
 dialer-group 10
 dialer bundle 10
 

interface Dialer11
 nat outbound
 link-protocol ppp
 ppp chap user 
 ppp chap password cipher
 ppp pap local-user
 ppp ipcp dns admit-any
 ppp ipcp dns request
 mtu 1492
 ip address ppp-negotiate
 tcp mss 1024
 dialer user username
 dialer-group 11
 dialer bundle 11

interface NULL0

interface Vlan-interface1
 ip address 192.168.0.100 255.255.255.0   
 ip policy-based-route pbr

interface Vlan-interface100
 ip address 172.16.100.1 255.255.255.0

interface Vlan-interface130
 ip address 192.168.130.1 255.255.254.0

interface Vlan-interface200
 ip address 192.168.100.1 255.255.255.0

interface Vlan-interface1000
 ip address 172.16.200.1 255.255.255.0

interface GigabitEthernet1/0/4
 port link-mode route
 nat outbound
 pppoe-client dial-bundle-number 11

interface GigabitEthernet1/0/5
 port link-mode route
 nat outbound
 pppoe-client dial-bundle-number 10

interface GigabitEthernet1/0/1
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all

interface GigabitEthernet1/0/2
 port link-mode bridge

interface GigabitEthernet1/0/3
 port link-mode bridge

 ip route-static 0.0.0.0 0.0.0.0 Dialer10 preference 40
 ip route-static 0.0.0.0 0.0.0.0 Dialer11
 
 dialer-rule 10 ip permit
 dialer-rule 11 ip permit

interface Vlan-interface1改10.100.18.1后
在VALN1 10.100.18.100
可以ping 172.16.200.1
不能ping 172.16.200.2

interface Vlan-interface1改会192.168.0.100后正常