bras新增免认证ip策略不生效

配置如下  配置后无法ping通 取消接口ip subscriber 后可以

#

acl advanced name free_out 

 rule 0 permit ip source 192.168.1.222 0 

#

 traffic classifier free_out operator and 

 if-match acl name free_out

 # 

traffic behavior free_out 

 filter permit

 free account

 #

 #

 acl advanced name free_permit 

 rule 0 permit ip destination 192.168.1.222 0 

# 

traffic classifier free_permit operator and 

 if-match acl name free_permit

 # 

traffic behavior free_permit

 filter permit

 free account 

#

 qos apply policy web global inbound

 qos apply policy out global outbound

 # 

qos policy out 

 classifier web_out behavior web_out 

 classifier web_deny behavior web_deny 

 classifier free_out behavior free_out

 # 

 qos policy web

 classifier web_permit behavior web_permit

 classifier web_http behavior web_http 

 classifier web_https behavior web_https

 classifier web_deny behavior web_deny

 classifier cmcc behavior cmcc 

 classifier unicom behavior unicom

 classifier local behavior local

 classifier free_permit behavior free_permit

# 

interface Route-Aggregation11 

 ip address 10.10.249.254 255.255.255.0 

 dhcp session-mismatch action fast-renew

 ip subscriber routed enable

 ip subscriber initiator dhcp enable

 ip subscriber initiator unclassified-ip enable matching-user

 ip subscriber initiator arp enable 

 ip subscriber user-detect ip icmp retry 5 interval 120

 ip subscriber authentication-method web

 ip subscriber pre-auth domain dm1 

 ip subscriber web-auth domain dm2

 #