MSR930完成L2TP配置，但客户机拨入失败

客户机可PING通路由器，但拨入失败，是何原因？

[MSR930]display current-configuration

#

 version 5.20, Release 2514P10

#

 sysname MSR930

#

 l2tp enable

#

 nat address-group 0 121.69.113.151 121.69.113.155

#

 domain default enable system

#

 dns proxy enable

#

 dar p2p signature-file flash:/p2p_default.mtd

#

 port-security enable

#

 web idle-timeout 60

#

 password-recovery enable

#

acl number 2000

 rule 15 permit source 10.0.0.0 0.0.0.255

#              

vlan 1

#

domain system

 authentication ppp local

 access-limit disable

 state active

 idle-cut disable

 self-service-url disable

 ip pool 1 10.0.1.11 10.0.1.20

#

dhcp server ip-pool dhcp-server

 network 10.0.0.0 mask 255.255.255.0

 network ip range 10.0.0.100 10.0.0.110

 gateway-list 10.0.0.1

 dns-list 211.167.230.100 211.167.230.200

#

user-group system

 group-attribute allow-guest

#

local-user admin

 password cipher $c$3$Mh3bMwcCwwpIk6+wAPHnzSwdK7vhfSV/UFXF2

 authorization-attribute level 3

 service-type web

local-user tiger

 password cipher $c$3$dckVwDUTHVHIMLa/lJJYZ+pJX0l7RJ5vW

 service-type ssh

local-user vpdnuser

 password cipher $c$3$hwBfwsAW7fg11ySAv4zgjpAD4nwQQwtzf

 authorization-attribute level 3

 service-type ppp

#

cwmp

 undo cwmp enable

#

l2tp-group 1

 undo tunnel authentication

 allow l2tp virtual-template 0 remote vpdnuser

 tunnel name LNS

#

interface Aux0

 async mode flow

 link-protocol ppp

#

interface Cellular0/0

 async mode protocol

 link-protocol ppp

#

interface Virtual-Template0

 ppp authentication-mode chap domain system

 ppp ipcp remote-address forced

 remote address pool 1

 ip address 10.0.1.1 255.255.255.0

#

interface NULL0

#

interface Vlan-interface1

 ip address 10.0.0.1 255.255.255.0

#

interface GigabitEthernet0/0

 port link-mode route

 nat outbound 2000 address-group 0

 ip address 121.69.113.98 255.255.255.240

 dns server 211.167.230.100

 dns server 211.167.230.200

#

interface GigabitEthernet0/1

 port link-mode bridge

#

interface GigabitEthernet0/2

 port link-mode bridge

#

interface GigabitEthernet0/3

 port link-mode bridge

#

interface GigabitEthernet0/4

 port link-mode bridge

#

 ip route-static 0.0.0.0 0.0.0.0 121.69.113.97

#

 dhcp server forbidden-ip 10.0.0.200 10.0.0.254

#

 dhcp enable

#

 nms primary monitor-interface GigabitEthernet0/0

#

 load xml-configuration

#

 load tr069-configuration

#

user-interface tty 12

user-interface aux 0

user-interface vty 0 4

 authentication-mode scheme

#

return