MSR36-40配置VPN

配置好VPN后，外网网络下员工无法通过账号连接VPN，在本地内网网络下测试VPN能连接，但是不能访问网页，只能登QQ之类；

请问是哪里配置有误；

需求：需要出差员工连接VPN访问公司内网，并且能通过当前VPN访问网页，以下是当前路由器L2TP配置,

1. #
2. version 7.1.064, Release 0707P21
3. #
4. sysname Bobei router
5. #
6. telnet server enable
7. telnet server acl 3006
8. #
9. ip pool l2tp1 192.168.133.2 192.168.133.100 
10. #
11. dialer-group 1 rule ip permit
12. #
13. dhcp enable
14. dhcp server always-broadcast
15. #
16. dns proxy enable
17. #
18. password-recovery enable
19. #
20. interface Virtual-Template0
21. #
22. interface Virtual-Template1
23. remote address pool l2tp1 
24. ip address 192.168.133.1 255.255.255.0
25. #
26. interface NULL0
27. #
28. interface GigabitEthernet0/0
29. port link-mode route
30. combo enable copper
31. ip address 192.168.2.1 255.255.255.0
32. tcp mss 1280
33. nat hairpin enable
34. ip policy-based-route aaa
35. #
36. interface GigabitEthernet0/1
37. port link-mode route
38. description Multiple_Line
39. combo enable copper
40. pppoe-client dial-bundle-number 0
41. 
    
42. #
43. security-zone name Local
44. #
45. security-zone name Trust
46. #
47. security-zone name DMZ
48. #
49. security-zone name Untrust
50. #
51. security-zone name Management
52. #
53. line class tty
54. user-role network-operator
55. #
56. 
    
57. #
58. password-control enable 
59. undo password-control aging enable 
60. undo password-control history enable 
61. password-control length 6
62. password-control login-attempt 3 exceed lock-time 10
63. password-control update-interval 0
64. password-control login idle-time 0
65. password-control complexity user-name check
66. #
67. domain syst
68. #
69. domain system
70. authentication ppp local
71. #
72. domain default enable system
73. #
74. #
75. local-user bobei class network
76. password cipher $c$3$7HWXLENtXA9I2VQbI8FdWVV2RlAGyY+XtUw1QQ==
77. service-type ppp
78. authorization-attribute user-role network-operator
79. #
80. l2tp-group 1 mode lns
81. allow l2tp virtual-template 1
82. undo tunnel authentication
83. tunnel name LNS
84. #
85. l2tp enable
86. #
87. ip http enable
88. #
89. wlan global-configuration
90. #
91. wlan ap-group default-group
92. vlan 1
93. #
94. cloud-management server domain oasis.h3c.com
95. #
96. return