问题描述：
192.168.1.1到16走wan130网段，其他的有124网段，不知道哪里错了，next hop都是网管地址
组网及组网描述：
display cu
#
version 5.20, Release 2516P21
#
sysname H3C
#
password-control enable
undo password-control aging enable
undo password-control history enable
password-control length 6
password-control login-attempt 3 exceed lock-time 10
password-control password update interval 0
password-control login idle-time 0
password-control complexity user-name check
#
domain default enable system
#
dns proxy enable
#
telnet server enable
#
dar p2p signature-file flash:/p2p_default.mtd
#
ndp enable
#
ntdp enable
#
cluster enable
#
port-security enable
#
password-recovery enable
#
acl number 2000
rule 10 permit source 192.168.1.0 0.0.0.240
#
acl number 3001
rule 0 permit ip source 192.168.1.0 0.0.0.255 destination 192.168.8.0 0.0.0.255
#
acl number 4999
rule 0 deny source-mac 0011-3212-3456 ffff-ffff-ffff
rule 1 permit
#
vlan 1
#
vlan 2
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
ike proposal 2
authentication-algorithm md5
#
ike peer 4g
exchange-mode aggressive
proposal 2
pre-shared-key cipher $c$3$zWQuwn4BGauUxf2Wd1NyGBiRshKWz8HQWQ==
remote-name basi@h7921
remote-address basi@h7921 dynamic
nat traversal
#
ipsec transform-set 4g
encapsulation-mode tunnel
transform esp
esp authentication-algorithm md5
esp encryption-algorithm des
#
ipsec policy 1048576 1 isakmp
connection-name 4g
security acl 3001
ike-peer 4g
transform-set 4g
sa duration traffic-based 1843200
sa duration time-based 3600
#
dhcp server ip-pool vlan1 extended
network ip range 192.168.1.100 192.168.1.200
network mask 255.255.255.0
gateway-list 192.168.1.1
dns-list 192.168.1.1
#
policy-based-route aaa permit node 0
if-match acl 2000
apply ip-address next-hop 103.100.67.196
apply ip-address next-hop 103.100.67.193
policy-based-route aaa permit node 1
apply ip-address next-hop 124.207.3.45
#
user-group system
group-attribute allow-guest
#
local-user admin
authorization-attribute level 3
service-type telnet
service-type web
#
cwmp
undo cwmp enable
#
interface
暂无评论