内网资源无法访问

防火墙sslvpn能够正常拨入但是无法访问内网资源，查看pc已有路由表下发，但是只能ping通192.168.123.254的网关无法ping通5.24.1.0网段地址

interface Route-Aggregation1.403

 description FOR-SSLVPN

 ip address 116.148.180.126 255.255.255.252

 vlan-type dot1q vid 403

#

interface M-GigabitEthernet0/0/0

 ip binding vpn-instance CDN_MGMN

 ip address 5.24.1.4 255.255.255.128

#

#

security-zone name Trust

 import interface Route-Aggregation1.402

#

security-zone name DMZ

#

security-zone name Untrust

 import interface Route-Aggregation1.401

 import interface Route-Aggregation1.403

 import interface SSLVPN-AC1

#

security-zone name Management

 import interface M-GigabitEthernet0/0/0

 import interface M-GigabitEthernet0/0/1

#

#

line vty 0 63  

 authentication-mode scheme

 user-role network-admin

 user-role network-operator

 idle-timeout 60 0

#

line vty 64 1023

 user-role network-operator

#

 ip route-static 0.0.0.0 0 Route-Aggregation1.401 172.16.1.1

 ip route-static 116.148.180.0 24 Route-Aggregation1.402 172.16.2.1

 ip route-static vpn-instance CDN_MGMN 0.0.0.0 0 5.24.1.1

 ipv6 route-static :: 0 Route-Aggregation1.401 FEC0::64

 ipv6 route-static 2408:8640:24FF:13:: 64 Route-Aggregation1.402 FEC0::66

#

#

sslvpn ip address-pool SSLVPN-POOL 192.168.123.1 192.168.123.10

#

sslvpn gateway ssl_gatway

 ip address 116.148.180.126 port 6443

 service enable

#

sslvpn context sslvpn

 gateway ssl_gatway domain domainip

 ip-tunnel interface SSLVPN-AC1

 ip-tunnel address-pool SSLVPN-POOL mask 255.255.255.0

 ip-tunnel dns-server primary 114.114.114.114

 ip-tunnel dns-server secondary 8.8.8.8

 web-access ip-client auto-activate

 ip-route-list rlist

  include 5.24.1.0 255.255.255.128

  include 116.148.180.0 255.255.255.128

 policy-group nbcdn-any

  ip-tunnel access-route ip-route-list rlist

  ip-tunnel address-pool SSLVPN-POOL mask 255.255.255.0

 verify-code enable

 log user-login enable

 log resource-access enable

 force-logout max-onlines enable

 service enable

#

security-policy ip

 rule 0 name ANY-Local

  action pass

  destination-zone Local

 rule 1 name Local-ANY

  action pass

  source-zone Local