防火墙做策略路由和开网页还有ipsec vpn

1.有线用电信（核心可以ping通183.6.172.155/30）

2.无线用移动（核心可以ping通120.236.166.33）

3.我发现我配置的f100连接不上web

4.下面是我的配置

interface GigabitEthernet1/0/1 

 port link-mode route 

 ip address 10.8.70.253 255.255.255.0

 # 

interface GigabitEthernet1/0/2 

 port link-mode route 

 ip address 183.6.172.154 255.255.255.248 

# interface GigabitEthernet1/0/3 

 port link-mode route 

 ip address 120.236.166.37 255.255.255.240 

# 

security-zone name Trust import interface 

GigabitEthernet1/0/1 

# 

security-zone name DMZ 

# 

security-zone name Untrust 

import interface GigabitEthernet1/0/2 

 import interface GigabitEthernet1/0/3 

# 

security-zone name Management 

# 

 zone-pair security source Any destination Any 

 packet-filter 3000 

# 

 ip route-static 0.0.0.0 0 120.236.166.31 

 ip route-static 0.0.0.0 0 183.6.172.151 

 ip route-static 10.0.0.0 8 10.8.70.254 

# 

acl advanced 3000 rule 0 permit ip 

# 

  ip https enable