MSR36-20双线路接入

现使用MSR36-20路由器的三个接口

G0/0 配置了3个子接口G0/0.10，G0/0.20，G0/0.30，下联二层交换机配置了3个Vlan，10、20和30。

G0/1配置PPPOE上网。 

G0/2配置固定地址上专网。

vlan20和vlan30可以走G0/2上互联网。 vlan10和vlan30可以走G0/2上专网。 配置好后，出口两个方向均通畅。 问题请教：专网没有问题，但部分互联网站可以打开，好多网页打打不开，不知道是什么原因。

#

version 7.1.064, Release 0615P10

#

sysname Router

#

clock timezone Beijing add 08:00:00

clock protocol ntp

#

telnet server enable

#

dialer-group 1 rule ip permit

#

ip ttl-expires enable

#

dhcp enable

dhcp server always-broadcast

#

dns proxy enable

#

password-recovery enable

#

vlan 1

#

dhcp server ip-pool Double

gateway-list 192.168.30.254

network 192.168.30.0 mask 255.255.255.0

address range 192.168.30.1 192.168.30.100

dns-list 114.114.114.114 61.128.114.166

#

dhcp server ip-pool internet

gateway-list 192.168.20.254

network 192.168.20.0 mask 255.255.255.0

address range 192.168.20.1 192.168.20.100

dns-list 114.114.114.114 61.128.114.166

#

dhcp server ip-pool intranet

gateway-list 192.168.10.254

network 192.168.10.0 mask 255.255.255.0

address range 192.168.10.1 192.168.10.100

#

controller Cellular0/0

#

controller Cellular0/1

#

interface Aux0

#

interface Dialer0

ppp chap password cipher $c$3$fUx8hIBRCBuB2uIif/hTEsBVUiuJhZXqXbPC

ppp chap user test

ppp ipcp dns admit-any

ppp ipcp dns request

ppp pap local-user test password cipher $c$3$AdItN7aQSaVQ4PL6x6Q/rXIwfpcRlTlM/QUy

dialer bundle enable

dialer-group 1

dialer timer idle 0

dialer timer autodial 5

ip address ppp-negotiate

nat outbound 2001

#

interface Virtual-Template0

#

interface NULL0

#

interface GigabitEthernet0/0

port link-mode route

combo enable copper

#

interface GigabitEthernet0/0.10

ip address 192.168.10.254 255.255.255.0

vlan-type dot1q vid 10

#

interface GigabitEthernet0/0.20

ip address 192.168.20.254 255.255.255.0

vlan-type dot1q vid 20

#

interface GigabitEthernet0/0.30

ip address 192.168.30.254 255.255.255.0

vlan-type dot1q vid 30

#

interface GigabitEthernet0/1

port link-mode route

description Multiple_Line

pppoe-client dial-bundle-number 0

#

interface GigabitEthernet0/2

port link-mode route

description Multiple_Line

ip address 192.168.88.252 255.255.255.248

nat outbound 2002

undo dhcp select server

#

security-zone name Local

#

security-zone name Trust

#

security-zone name DMZ

#

security-zone name Untrust

#

security-zone name Management

#

scheduler logfile size 16

#

line class aux

user-role network-admin

#

line class tty

user-role network-operator

#

line class vty

user-role network-operator

#

line aux 0

authentication-mode scheme

user-role network-admin

#

line vty 0 4

authentication-mode scheme

user-role network-operator

#

line vty 5 63

authentication-mode scheme

user-role network-operator

#

ip route-static 0.0.0.0 0 Dialer0 preference 80

ip route-static 10.0.0.0 16 GigabitEthernet0/2 192.168.88.254

#

ssh server enable

ssh server compatible-ssh1x enable

#

ntp-service enable

#

acl basic 2001

rule 0 permit source 192.168.20.0 0.0.0.255

rule 1 permit source 192.168.30.0 0.0.0.255

rule 2 deny

#

acl basic 2002

rule 0 permit source 192.168.10.0 0.0.0.255

rule 1 permit source 192.168.30.0 0.0.0.255

rule 2 deny

#

password-control enable

undo password-control aging enable

undo password-control history enable

password-control length 6

password-control login-attempt 3 exceed lock-time 10

password-control update-interval 0

password-control login idle-time 0

password-control complexity user-name check

#

domain system

#

domain default enable system

#

role name level-0

description Predefined level-0 role

#

role name level-1

description Predefined level-1 role

#

role name level-2

description Predefined level-2 role

#

role name level-3

description Predefined level-3 role

#

role name level-4

description Predefined level-4 role

#

role name level-5

description Predefined level-5 role

#

role name level-6

description Predefined level-6 role

#

role name level-7

description Predefined level-7 role

#

role name level-8

description Predefined level-8 role

#

role name level-9

description Predefined level-9 role

#

role name level-10

description Predefined level-10 role

#

role name level-11

description Predefined level-11 role

#

role name level-12

description Predefined level-12 role

#

role name level-13

description Predefined level-13 role

#

role name level-14

description Predefined level-14 role

#

user-group system

#

local-user admin class manage

service-type ssh terminal http https

authorization-attribute user-role network-admin

#

ip http enable

#

wlan global-configuration

#

wlan ap-group default-group

#

cloud-management server domain oasis.h3c.com

#

return