H3C F-1000-S-AI+无法telnet到防火墙上

大家好！防火墙型号是F-1000-S-AI，汇聚交换机型号是S7506E-S，问题：接在聚交换机S7506E-S上的IP不能telnet到防火墙，也ping不通？

F-1000-S-AI和S7506E-S分别配置如下：

#
 version 5.20, Release 3732
#
 sysname F-1000
#
 undo voice vlan mac-address 00e0-bb00-0000
#
 domain default enable system
#
 undo alg dns
 undo alg rtsp
 undo alg h323
 undo alg sip
 undo alg sqlnet
 undo alg pptp
 undo alg ils
 undo alg nbt
 undo alg msn
 undo alg qq
 undo alg tftp
 undo alg sccp
 undo alg gtp
#
session synchronization enable
#
 undo password-recovery enable
#
 blacklist enable
#
 time-range moring 08:15 to 12:00 working-day Sat  
 time-range workingx 13:30 to 17:45 working-day Sat  
#
acl number 2000
 rule 0 permit source 192.168.8.44 0
 rule 5 permit source 192.168.8.29 0
 rule 10 permit source 192.168.8.46 0
 rule 15 permit source 192.168.8.70 0
 rule 20 permit source 192.168.8.4 0
 rule 30 permit source 192.168.8.40 0
 rule 35 permit source 192.168.8.55 0
 rule 40 permit source 192.168.8.28 0
 rule 45 permit source 192.168.8.26 0
 rule 50 permit source 192.168.8.21 0
 rule 55 permit source 192.168.8.30 0
 rule 60 permit source 192.168.8.63 0
 rule 65 permit source 192.168.8.79 0
 rule 70 permit source 192.168.8.12 0
 rule 75 permit source 192.168.8.25 0
 rule 80 permit source 192.168.8.57 0
 rule 90 permit source 192.168.11.8 0
 rule 95 permit source 192.168.11.3 0
 rule 100 permit source 192.168.11.11 0
 rule 105 deny source 192.168.11.0 0.0.0.255
 rule 110 deny source 192.168.18.0 0.0.0.255
 rule 116 deny source 192.168.12.0 0.0.0.255
 rule 117 deny source 192.168.13.0 0.0.0.255
 rule 118 deny source 192.168.14.0 0.0.0.255
 rule 120 permit source 192.168.15.21 0
 rule 121 deny source 192.168.15.0 0.0.0.255
 rule 122 permit source 192.168.8.253 0
 rule 124 permit source 192.168.9.3 0
 rule 125 permit source 192.168.9.16 0
 rule 127 permit source 192.168.9.20 0
 rule 128 deny source 192.168.16.0 0.0.0.255
 rule 129 deny source 192.168.21.0 0.0.0.255
 rule 131 permit source 192.168.19.30 0
 rule 132 permit source 192.168.19.245 0
 rule 134 permit
acl number 2002
 rule 0 permit source 192.168.19.0 0.0.0.255
acl number 2005
 description deny wan
 rule 10 deny source 192.168.21.0 0.0.0.255
#
vlan 1
#
vlan 1000
#
domain system
 access-limit disable
 state active
 idle-cut disable
 self-service-url disable
#
pki domain default
  crl check disable
#
traffic classifier classifier_1 operator and
 if-match acl 2002
traffic classifier test operator and
 if-match acl 2002
#
traffic behavior behavior_1
#
policy-based-route test1 permit node 2
 if-match acl 2002
 apply ip-precedence network
 apply output-interface GigabitEthernet0/3
 apply ip-address next-hop 电信
 apply default output-interface GigabitEthernet0/1
 apply ip-address default next-hop 电信
#
user-group system
 group-attribute allow-guest
#
local-user ghjtc
 password cipher $c$3$JCtHMAN2XMwa2pj++IaE39Ij/iJB4nOnciFgmMRw
 authorization-attribute level 3
 service-type ssh telnet terminal
 service-type web
local-user h3c
 password cipher $c$3$KFx1SuW7wDdRpJp5aWSDVaKdLfLgP3v+G9aeBC1u
 authorization-attribute level 3
 service-type ssh telnet terminal
 service-type web
local-user zcxxk
 password cipher $c$3$Xj79xAOpW7knRREhPLnJwRtztkukA/3x
 service-type ssh telnet
#
interface NULL0
#
interface LoopBack0
#
interface Vlan-interface1000
 ip address 172.168.10.254 255.255.255.0
#
interface GigabitEthernet0/0
 port link-mode route
 ip address 192.168.0.1 255.255.255.0
#
interface GigabitEthernet0/1
 port link-mode route
 description TO-yidongchukou
 nat outbound 2005
 nat outbound 2000
 nat server protocol tcp global 移动IP 443 inside 10.0.0.77 443
 nat server protocol tcp global 移动IP  4430 inside 10.0.0.77 4430
 nat server protocol tcp global 移动IP  8080 inside 10.0.0.99 8080
 nat server 1 protocol udp global current-interface 500 inside 10.0.0.222 500
 nat server 2 protocol udp global current-interface 4500 inside 10.0.0.222 4500
 nat server 3 protocol tcp global current-interface 10443 inside 10.0.0.222 443
 nat server 4 protocol tcp global current-interface 2222 inside 10.0.0.222 2222
 nat server protocol tcp global 移动IP  9090 inside 10.0.0.66 9090
 nat server protocol tcp global 移动IP  9080 inside 10.0.0.66 9080
 nat server protocol tcp global 移动IP  60080 inside 10.0.0.67 www
 ip address 移动IP  255.255.255.0
#
interface GigabitEthernet0/2
 port link-mode route
 description TO-S7506e
 ip address 100.100.100.2 255.255.255.0
#
interface GigabitEthernet0/3
 port link-mode route
 description TO-dianxinchukou
 nat outbound 2005
 nat outbound 2000
 nat server protocol tcp global 电信IP 4430 inside 10.0.0.77 4430
 nat server protocol tcp global 电信IP 8080 inside 10.0.0.99 8080
 nat server protocol tcp global 电信IP 443 inside 10.0.0.77 443
 nat server protocol tcp global 电信IP 5000 inside 10.0.0.99 8080
 nat server protocol tcp global 电信IP 9090 inside 10.0.0.66 9090
 nat server protocol tcp global 电信IP 9080 inside 10.0.0.66 9080
 ip address 电信IP 255.255.255.248
#
interface GigabitEthernet0/4
 port link-mode route
#
interface GigabitEthernet0/5
 port link-mode route
#
interface GigabitEthernet0/6
 port link-mode route
#
interface GigabitEthernet0/7
 port link-mode route
#
interface GigabitEthernet0/8
 port link-mode route
#
interface GigabitEthernet0/9
 port link-mode route
#
interface GigabitEthernet0/10
 port link-mode route
#
interface GigabitEthernet0/11
 port link-mode route
#
nqa entry admin test1
 type icmp-echo
  destination ip 移动
  frequency 100
  history-record enable
  next-hop 移动
  reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only
#
vd Root id 1
#
zone name Management id 0
 priority 100
 import interface GigabitEthernet0/0
zone name Local id 1
 priority 100
zone name Trust id 2
 priority 85
 import interface GigabitEthernet0/2
zone name DMZ id 3
 priority 50
zone name Untrust id 4
 priority 5
 import interface GigabitEthernet0/1
 import interface GigabitEthernet0/3
switchto vd Root
 object network subnet 192.168.14.90/255.255.255.0
  subnet 192.168.14.90 255.255.255.0
 zone name Management id 0
 ip virtual-reassembly
 zone name Local id 1
 ip virtual-reassembly
 zone name Trust id 2
 ip virtual-reassembly
 zone name DMZ id 3
 ip virtual-reassembly
 zone name Untrust id 4
 ip virtual-reassembly
 interzone source Management destination Management
 interzone source Local destination Trust
  rule 0 permit
   source-ip any_address
   destination-ip any_address
   service any_service
   rule enable
 interzone source Trust destination Untrust
  rule 0 permit
   source-ip any_address
   destination-ip any_address
   service any_service
   rule enable
 interzone source Untrust destination Trust
  rule 0 permit
   source-ip any_address
   destination-ip any_address
   service any_service
   rule enable
#
 ip ip-prefix test index 10 permit 192.168.19.0 24
#
 ip route-static 0.0.0.0 0.0.0.0 电信 track 1
 ip route-static 0.0.0.0 0.0.0.0 移动 preference 70
 ip route-static 10.0.0.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.2.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.3.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.4.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.5.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.6.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.7.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.8.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.9.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.10.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.11.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.12.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.13.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.14.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.15.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.16.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.17.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.18.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.19.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.20.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.21.0 255.255.255.0 100.100.100.1
 ip route-static 192.168.50.0 255.255.255.0 100.100.100.1
#
 track 1 nqa entry admin test1 reaction 1
#
 nqa schedule admin test1 start-time now lifetime forever
#
 ssh server enable
#
 ip https port 4321
#
 load xml-configuration
#
 load tr069-configuration
#
user-interface con 0
 authentication-mode scheme
user-interface vty 0 4
 authentication-mode scheme
 protocol inbound ssh
#
return

S7506E-S配置如下

#
 version 5.20, Release 6708P03
#
 sysname S7506E-S
#
 ftp server enable
#
 domain default enable system
#
 telnet server enable
#
switch-mode standard
switch-mode normal slot 3
switch-mode normal slot 5
#
switch-mode  route-normal
#
 password-recovery enable
#
vlan 1
#
vlan 2 to 21
#
vlan 22
 description xin_neng_yuan_xiang_mu_zu
#
vlan 50
 description linshiwaiwang
#
vlan 51
#
vlan 52
 description dian_li_gong_shi_zhuan_yong
#
vlan 100
 description TO-Server
#
vlan 1000
 description TO-GuanLi
#
vlan 2000
 description TO-FW
#
vlan 4000 to 4001
#
domain system
 access-limit disable
 state active
 idle-cut disable
 self-service-url disable
#
dhcp server ip-pool 1
 network 192.168.2.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.2.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 10
 network 192.168.11.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.11.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 11
 network 192.168.12.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.12.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 12
 network 192.168.13.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.13.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 13
 network 192.168.14.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.14.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 14
 network 192.168.15.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.15.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 15
 network 192.168.16.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.16.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 16
 network 192.168.17.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.17.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 17
 network 192.168.18.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.18.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 18
 network 192.168.19.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.19.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 19
 network 192.168.20.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.20.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 2
 network 192.168.3.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.3.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 20
 network 192.168.21.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.21.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 21
 network 192.168.22.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.20.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 22
#
dhcp server ip-pool 3
 network 192.168.4.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.4.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 30
#
dhcp server ip-pool 4
 network 192.168.5.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.5.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 5
 network 192.168.6.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.6.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 50
#
dhcp server ip-pool 6
 network 192.168.7.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.7.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 7
 network 192.168.8.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.8.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 8
 network 192.168.9.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.9.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool 9
 network 192.168.10.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.10.1
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool vlan50
 network 192.168.50.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.50.1
 dns-list 218.201.4.3 114.114.114.114
 nbns-list 10.0.0.111
 bootfile-name zjqpe
#
dhcp server ip-pool vlan51
 network 192.168.51.0 mask 255.255.255.0
 next-server 10.0.0.88
 gateway-list 192.168.51.1
 bootfile-name zjqpe
#
user-group system
 group-attribute allow-guest
#
local-user admin
 password cipher $c$3$SuwLca7MEIcsZS+3ebB4l7dMxVa7KaJtdcFa100eVGs=
 authorization-attribute level 3
 service-type telnet terminal
 service-type web
local-user admin1
 password cipher $c$3$1Q6WC0usraC//YNjtaQDflOrtB2O+J12Q6+/AM/JDb8=
 authorization-attribute level 2
 service-type telnet terminal
 service-type web
#
 stp enable
#
interface NULL0
#
interface Vlan-interface1
 ip address dhcp-alloc client-identifier mac Vlan-interface1
#
interface Vlan-interface2
 ip address 192.168.2.1 255.255.255.0
#
interface Vlan-interface3
 ip address 192.168.3.1 255.255.255.0
#
interface Vlan-interface4
 ip address 192.168.4.1 255.255.255.0
#
interface Vlan-interface5
 ip address 192.168.5.1 255.255.255.0
#
interface Vlan-interface6
 ip address 192.168.6.1 255.255.255.0
#
interface Vlan-interface7
 ip address 192.168.7.1 255.255.255.0
#
interface Vlan-interface8
 ip address 192.168.8.1 255.255.255.0
#
interface Vlan-interface9
 ip address 192.168.9.1 255.255.255.0
#
interface Vlan-interface10
 ip address 192.168.10.1 255.255.255.0
#
interface Vlan-interface11
 ip address 192.168.11.1 255.255.255.0
#
interface Vlan-interface12
 ip address 192.168.12.1 255.255.255.0
#
interface Vlan-interface13
 ip address 192.168.13.1 255.255.255.0
#
interface Vlan-interface14
 ip address 192.168.14.1 255.255.255.0
#
interface Vlan-interface15
 ip address 192.168.15.1 255.255.255.0
#
interface Vlan-interface16
 ip address 192.168.16.1 255.255.255.0
#
interface Vlan-interface17
 ip address 192.168.17.1 255.255.255.0
#
interface Vlan-interface18
 ip address 192.168.18.1 255.255.255.0
#
interface Vlan-interface19
 ip address 192.168.19.1 255.255.255.0
 arp send-gratuitous-arp interval 2000
#
interface Vlan-interface20
 ip address 192.168.20.1 255.255.255.0
#
interface Vlan-interface21
 ip address 192.168.21.1 255.255.255.0
#
interface Vlan-interface22
 ip address 192.168.22.1 255.255.255.0
#
interface Vlan-interface50
 description linshiwaiwang
 ip address 192.168.50.1 255.255.255.0
#
interface Vlan-interface51
 ip address 192.168.51.1 255.255.255.0
#
interface Vlan-interface52
 ip address 192.168.52.1 255.255.255.0
#
interface Vlan-interface100
 description TO-Server
 ip address 10.0.0.2 255.255.255.0
#
interface Vlan-interface1000
 ip address 172.168.10.1 255.255.255.0
#
interface Vlan-interface2000
 description TO-FW
 ip address 100.100.100.1 255.255.255.0
#
interface Vlan-interface4000
 ip address 10.80.255.252 255.255.255.0
#
interface Vlan-interface4001
 ip address 10.80.254.252 255.255.255.0
#
interface GigabitEthernet3/0/1
 port link-mode bridge
#
interface GigabitEthernet3/0/2
 port link-mode bridge
#
interface GigabitEthernet3/0/3
 port link-mode bridge
#
interface GigabitEthernet3/0/4
 port link-mode bridge
#
interface GigabitEthernet3/0/5
 port link-mode bridge
#
interface GigabitEthernet3/0/6
 port link-mode bridge
#
interface GigabitEthernet3/0/7
 port link-mode bridge
#
interface GigabitEthernet3/0/8
 port link-mode bridge
#
interface GigabitEthernet3/0/9
 port link-mode bridge
#
interface GigabitEthernet3/0/10
 port link-mode bridge
#
interface GigabitEthernet3/0/11
 port link-mode bridge
#
interface GigabitEthernet3/0/12
 port link-mode bridge
#
interface GigabitEthernet3/0/13
 port link-mode bridge
#
interface GigabitEthernet3/0/14
 port link-mode bridge
#
interface GigabitEthernet3/0/15
 port link-mode bridge
#
interface GigabitEthernet3/0/16
 port link-mode bridge
#
interface GigabitEthernet3/0/17
 port link-mode bridge
 shutdown
#
interface GigabitEthernet3/0/18
 port link-mode bridge
 shutdown
#
interface GigabitEthernet3/0/19
 port link-mode bridge
 shutdown
#
interface GigabitEthernet3/0/20
 port link-mode bridge
#
interface GigabitEthernet3/0/21
 port link-mode bridge
 shutdown
#
interface GigabitEthernet3/0/22
 port link-mode bridge
 shutdown
#
interface GigabitEthernet3/0/23
 port link-mode bridge
 shutdown
#
interface GigabitEthernet3/0/24
 port link-mode bridge
 shutdown
#
interface GigabitEthernet3/0/25
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet3/0/26
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet3/0/27
 port link-mode bridge
 description 3floor
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet3/0/28
 port link-mode bridge
 shutdown
#
interface GigabitEthernet3/0/29
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet3/0/30
 port link-mode bridge
 port access vlan 2000
#
interface GigabitEthernet3/0/31
 port link-mode bridge
 port access vlan 52
 shutdown
#
interface GigabitEthernet3/0/32
 port link-mode bridge
 shutdown
#
interface GigabitEthernet5/0/1
 port link-mode bridge
 shutdown
#
interface GigabitEthernet5/0/2
 port link-mode bridge
 shutdown
#
interface GigabitEthernet5/0/3
 port link-mode bridge
 shutdown
#
interface GigabitEthernet5/0/4
 port link-mode bridge
 shutdown
#
interface GigabitEthernet5/0/5
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet5/0/6
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet5/0/7
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet5/0/8
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet5/0/9
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet5/0/10
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet5/0/11
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet5/0/12
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet5/0/13
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet5/0/14
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet5/0/15
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet5/0/16
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet5/0/17
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
#
interface GigabitEthernet5/0/18
 port link-mode bridge
 port access vlan 100
#
interface GigabitEthernet5/0/19
 port link-mode bridge
 port access vlan 100
#
interface GigabitEthernet5/0/20
 port link-mode bridge
 port access vlan 100
#
interface GigabitEthernet5/0/21
 port link-mode bridge
 port access vlan 100
#
interface GigabitEthernet5/0/22
 port link-mode bridge
 port access vlan 100
#
interface GigabitEthernet5/0/23
 port link-mode bridge
 port access vlan 100
#
interface GigabitEthernet5/0/24
 port link-mode bridge
 port access vlan 100
#
interface GigabitEthernet5/0/25
 port link-mode bridge
 port access vlan 100
#
interface GigabitEthernet5/0/26
 port link-mode bridge
 port access vlan 100
#
interface GigabitEthernet5/0/27
 port link-mode bridge
#
interface GigabitEthernet5/0/28
 port link-mode bridge
 port access vlan 2000
#
interface M-Ethernet0/0/0
#
 ip route-static 0.0.0.0 0.0.0.0 100.100.100.2
#
 undo info-center logfile enable
#
 snmp-agent
 snmp-agent local-engineid 800063A20370F96D5B2561
 snmp-agent community read public
 snmp-agent sys-info version all
#
 dhcp server forbidden-ip 192.168.2.1 192.168.2.50
 dhcp server forbidden-ip 192.168.3.1 192.168.3.50
 dhcp server forbidden-ip 192.168.4.1 192.168.4.50
 dhcp server forbidden-ip 192.168.5.1 192.168.5.50
 dhcp server forbidden-ip 192.168.6.1 192.168.6.50
 dhcp server forbidden-ip 192.168.7.1 192.168.7.50
 dhcp server forbidden-ip 192.168.9.1 192.168.9.50
 dhcp server forbidden-ip 192.168.10.1 192.168.10.50
 dhcp server forbidden-ip 192.168.11.1 192.168.11.50
 dhcp server forbidden-ip 192.168.12.1 192.168.12.50
 dhcp server forbidden-ip 192.168.13.1 192.168.13.50
 dhcp server forbidden-ip 192.168.14.1 192.168.14.50
 dhcp server forbidden-ip 192.168.15.1 192.168.15.50
 dhcp server forbidden-ip 192.168.16.1 192.168.16.50
 dhcp server forbidden-ip 192.168.17.1 192.168.17.50
 dhcp server forbidden-ip 192.168.18.1 192.168.18.50
 dhcp server forbidden-ip 192.168.19.1 192.168.19.50
 dhcp server forbidden-ip 192.168.20.1 192.168.20.50
 dhcp server forbidden-ip 192.168.21.1 192.168.21.50
 dhcp server forbidden-ip 192.168.50.1 192.168.50.50
 dhcp server forbidden-ip 192.168.51.1 192.168.51.50
 dhcp server forbidden-ip 192.168.2.200 192.168.2.254
 dhcp server forbidden-ip 192.168.3.200 192.168.3.254
 dhcp server forbidden-ip 192.168.4.200 192.168.4.254
 dhcp server forbidden-ip 192.168.5.200 192.168.5.254
 dhcp server forbidden-ip 192.168.7.200 192.168.7.254
 dhcp server forbidden-ip 192.168.9.200 192.168.9.254
 dhcp server forbidden-ip 192.168.10.200 192.168.10.254
 dhcp server forbidden-ip 192.168.11.200 192.168.11.254
 dhcp server forbidden-ip 192.168.12.200 192.168.12.254
 dhcp server forbidden-ip 192.168.13.200 192.168.13.254
 dhcp server forbidden-ip 192.168.14.200 192.168.14.254
 dhcp server forbidden-ip 192.168.15.200 192.168.15.254
 dhcp server forbidden-ip 192.168.16.200 192.168.16.254
 dhcp server forbidden-ip 192.168.17.200 192.168.17.254
 dhcp server forbidden-ip 192.168.18.200 192.168.18.254
 dhcp server forbidden-ip 192.168.19.200 192.168.19.254
 dhcp server forbidden-ip 192.168.20.200 192.168.20.254
 dhcp server forbidden-ip 192.168.21.200 192.168.21.254
 dhcp server forbidden-ip 192.168.50.200 192.168.50.254
 dhcp server forbidden-ip 192.168.51.200 192.168.51.254
 dhcp server forbidden-ip 192.168.8.1 192.168.8.50
 dhcp server forbidden-ip 192.168.8.250 192.168.8.254
 dhcp server forbidden-ip 192.168.6.250 192.168.6.254
 dhcp server forbidden-ip 192.168.22.1 192.168.22.50
 dhcp server forbidden-ip 192.168.22.200 192.168.22.254
#
 dhcp enable
#
 ip https enable
#
 load xml-configuration
#
 load tr069-configuration
#
user-interface aux 0 1
 authentication-mode scheme
user-interface vty 0 4
 authentication-mode scheme
user-interface vty 5 15
#
return