防火墙上做dhcp，电脑接防火墙上 为什么拿不到地址

都是vlan1，trust的地址也写了dhcp的网关地址

dhcp server enable了吗配置不行发出来看看吧

dhcp server ip-pool waiwang gateway-list 10.168.80.1 network 10.168.80.0 mask 255.255.255.0 dns-list 61.177.7.1 114.114.114.114 # interface NULL0 # interface GigabitEthernet1/0/0 port link-mode route # interface GigabitEthernet1/0/1 port link-mode route # interface GigabitEthernet1/0/2 port link-mode route # interface GigabitEthernet1/0/3 port link-mode route # interface GigabitEthernet1/0/4 port link-mode route # interface GigabitEthernet1/0/5 port link-mode route # interface GigabitEthernet1/0/6 port link-mode route # interface GigabitEthernet1/0/7 port link-mode route # interface GigabitEthernet1/0/8 port link-mode route # interface GigabitEthernet1/0/9 port link-mode route # interface GigabitEthernet1/0/11 port link-mode route # interface GigabitEthernet1/0/12 port link-mode route # interface GigabitEthernet1/0/13 port link-mode route # interface GigabitEthernet1/0/14 port link-mode route # interface GigabitEthernet1/0/15 port link-mode route # interface GigabitEthernet1/0/16 port link-mode route # interface GigabitEthernet1/0/17 port link-mode route # interface GigabitEthernet1/0/18 port link-mode route # interface GigabitEthernet1/0/19 port link-mode route # interface GigabitEthernet1/0/20 port link-mode route # interface GigabitEthernet1/0/21 port link-mode route # interface GigabitEthernet1/0/22 port link-mode route combo enable copper # interface GigabitEthernet1/0/23 port link-mode route combo enable copper # interface GigabitEthernet1/0/24 port link-mode route combo enable copper # interface GigabitEthernet1/0/25 port link-mode route combo enable copper # interface GigabitEthernet1/0/26 port link-mode route combo enable copper # interface GigabitEthernet1/0/27 port link-mode route combo enable copper # interface GigabitEthernet1/0/28 port link-mode route combo enable copper ip address 10.168.80.1 255.255.255.0 manage http inbound manage https inbound manage ping inbound manage telnet inbound # interface GigabitEthernet1/0/29 port link-mode route combo enable copper ip address 218.4.160.82 255.255.255.248 nat outbound 3500 manage https inbound manage telnet inbound # interface GigabitEthernet1/0/10 port link-mode bridge # interface M-GigabitEthernet1/0/0 ip address 192.168.0.1 255.255.255.0 # interface M-GigabitEthernet1/0/1 ip address 192.168.1.1 255.255.255.0 # interface Ten-GigabitEthernet1/0/30 port link-mode route # interface Ten-GigabitEthernet1/0/31 port link-mode route # security-zone name Local # security-zone name Trust import interface GigabitEthernet1/0/28 # security-zone name DMZ # security-zone name Untrust import interface GigabitEthernet1/0/29 # security-zone name Management import interface M-GigabitEthernet1/0/0 import interface M-GigabitEthernet1/0/1 # scheduler logfile size 16 # line class aux user-role network-operator # line class console authentication-mode scheme user-role network-admin # line class vty user-role network-operator # line aux 0 user-role network-admin # line con 0 user-role network-admin # line vty 0 63 authentication-mode scheme user-role network-admin # ip route-static 0.0.0.0 0 218.4.160.81 # info-center loghost 127.0.0.1 port 3301 format default info-center source CFGLOG loghost level informational # performance-management # ssh server enable # arp ip-conflict log prompt # acl advanced 3500 rule 10 permit ip # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$mKLP9Gsk2fTpQYav$F/vb0/Xwx+yyDR8x9b33N3WxxgW51T2yK9nOmgcBxKWl+ZeDs318jO2tY8sY3w6867Y3GvPh0tmPGlM0RMaCaA== service-type ssh terminal https authorization-attribute user-role level-3 authorization-attribute user-role network-admin authorization-attribute user-role network-operator # ipsec logging negotiation enable # ike logging negotiation enable # ip https enable # loadbalance isp file sda0:/lbispinfo_v1.5.tp # security-policy ip rule 0 name 上网 action pass source-zone Trust destination-zone Untrust rule 1 name 防火墙到外网 action pass source-zone Local destination-zone Untrust rule 2 name 外网到防火墙 action pass source-zone Untrust destination-zone Local rule 3 name 内网到防火墙 action pass source-zone Trust destination-zone Local rule 4 name 防火墙到内网 action pass source-zone Local destination-zone Trust rule 5 name 内网到内网 action pass source-zone Trust destination-zone Trust rule 6 name Any_Any_6_IPv4 # cloud-management server domain opstunnel-seccloud.h3c.com

dhcp enable开了的，防火墙下面接的交换机是可以上网的