刚在 GigabitEthernet0/0 口web界面修改MSS为1200，直接打不开网页了， 然后去GigabitEthernet0/14 的一个VLAN的设置，设置了还是无法访问 ***.***/project/CN-278be3a28988eb1185aa0003ff0b007e ，正常访问其他网页都没问题， 除了 MSR 26-00这台，没有单独安全设备了，这台MSR 26-00查看是否URL过滤或安全策略的限制，有命令可以参考吗？

设备配置由于我回复你的格式都乱了，我放到我网站下面txt链接是个txt链接点下看下：在上面楼层2 最后一个快捷方式，劳烦您看下。

# version 5.20, Release 2516P21 # sysname MSR2600 # password-control enable undo password-control aging enable undo password-control history enable password-control length 6 password-control login-attempt 3 exceed lock-time 10 password-control password update interval 0 password-control login idle-time 0 password-control complexity user-name check # nat address-group 0 192.168.1.11 192.168.1.20 # domain default enable system # dns resolve dns proxy enable dns server 114.114.114.114 dns server 8.8.8.8 # dar p2p signature-file flash:/p2p_default.mtd # lldp enable # port-security enable # password-recovery enable # acl number 2000 rule 5 permit source 172.10.0.0 0.0.255.255 rule 10 permit source 10.10.10.0 0.0.0.255 rule 15 permit source 172.16.0.0 0.0.255.255 # vlan 1 # domain system access-limit disable state active idle-cut disable self-service-url disable # dhcp server ip-pool 1 network 172.16.10.0 mask 255.255.255.0 gateway-list 172.16.10.1 dns-list 202.106.0.20 114.114.114.114 # dhcp server ip-pool vlan1 extended network ip range 171.16.10.1 171.16.10.200 network mask 255.255.255.0 gateway-list 171.16.10.1 dns-list 8.8.8.8 202.106.0.20 # user-group system group-attribute allow-guest # local-user abc authorization-attribute level 3 service-type web # cwmp undo cwmp enable # attack-defense policy 86 interface GigabitEthernet0/0 signature-detect action drop-packet signature-detect fraggle enable signature-detect land enable signature-detect winnuke enable signature-detect tcp-flag enable signature-detect icmp-unreachable enable signature-detect icmp-redirect enable signature-detect tracert enable signature-detect smurf enable signature-detect source-route enable signature-detect route-record enable signature-detect large-icmp enable defense scan enable defense syn-flood enable defense syn-flood action drop-packet defense udp-flood enable defense udp-flood action drop-packet defense icmp-flood enable defense icmp-flood action drop-packet # interface Aux0 async mode flow link-protocol ppp # interface Cellular0/0 async mode protocol link-protocol ppp # interface Dialer10 nat outbound link-protocol ppp ppp chap user ********** ppp chap password cipher ********** ppp pap local-user ********** password cipher ********** ppp ipcp dns admit-any ppp ipcp dns request mtu 1492 ip address ppp-negotiate tcp mss 1024 dialer user username dialer-group 10 dialer bundle 10 # interface NULL0 # interface Vlan-interface1 ip address 171.16.10.1 255.255.255.0 dhcp server apply ip-pool vlan1 # interface GigabitEthernet0/0 port link-mode route description wan nat outbound nat server protocol tcp global 192.168.1.200 any inside 172.16.10.200 any pppoe-client dial-bundle-number 10 duplex full attack-defense apply policy 86 # interface GigabitEthernet0/1 port link-mode route # interface GigabitEthernet0/14 port link-mode route description lan ip address 172.16.10.1 255.255.255.0 ip address 172.10.10.1 255.255.255.0 sub # interface GigabitEthernet0/16 port link-mode route # interface GigabitEthernet0/2 port link-mode bridge # interface GigabitEthernet0/3 port link-mode bridge # interface GigabitEthernet0/4 port link-mode bridge # interface GigabitEthernet0/5 port link-mode bridge # interface GigabitEthernet0/6 port link-mode bridge # interface GigabitEthernet0/7 port link-mode bridge # interface GigabitEthernet0/8 port link-mode bridge # interface GigabitEthernet0/9 port link-mode bridge # interface GigabitEthernet0/10 port link-mode bridge # interface GigabitEthernet0/11 port link-mode bridge # interface GigabitEthernet0/12 port link-mode bridge # interface GigabitEthernet0/13 port link-mode bridge # interface GigabitEthernet0/15 port link-mode bridge # ip route-static 0.0.0.0 0.0.0.0 Dialer10 ip route-static 10.0.0.0 255.0.0.0 172.16.10.200 # dhcp server forbidden-ip 172.10.10.1 172.10.10.20 dhcp server forbidden-ip 172.16.10.200 # dhcp enable # dialer-rule 10 ip permit # nms primary monitor-interface Dialer10 # load xml-configuration # load tr069-configuration # user-interface tty 12 user-interface aux 0 user-interface vty 0 4 # return

设备配置由于我回复你的格式都乱了，我放到我网站下面txt链接是个txt链接点下看下：在上面楼层2 最后一个快捷方式，劳烦您看下。