H3C SecPath F1090防火墙设备sslvpn故障

检查下主备链路情况

检查下到sslvpn网关通吗

通的正常，后面我使用防火墙内网地址映射方式indoe也能正常登录，但是使用接口地址就是无法登录

sslvpn配置内容：

sslvpn ip address-pool sslvpn_pool 10.8.240.2 10.8.240.254
#
sslvpn gateway sslvpn_gw1
ip address 113.23.169.18 port 10443
service enable
#
sslvpn gateway sslvpn_gw3
ip address 113.23.182.130 port 10443
service enable
#
sslvpn gateway sslvpn_gw4
ip address 10.8.254.1 port 10443
service enable
#
sslvpn context ssl_context
gateway sslvpn_gw1 domain domain
gateway sslvpn_gw3 domain domain
gateway sslvpn_gw4 domain domain
ip-tunnel interface SSLVPN-AC1
ip-tunnel address-pool sslvpn_pool mask 255.255.255.0
ip-route-list rt_1
include 10.8.0.0 255.255.0.0
policy-group admin_res
filter ip-tunnel acl 3501
ip-tunnel access-route ip-route-list rt_1
ip-tunnel address-pool sslvpn_pool mask 255.255.255.0
policy-group dev
filter ip-tunnel acl 3503
ip-tunnel access-route ip-route-list rt_1
ip-tunnel address-pool sslvpn_pool mask 255.255.254.0
policy-group op_res
filter ip-tunnel acl 3502
ip-tunnel access-route ip-route-list rt_1
ip-tunnel address-pool sslvpn_pool mask 255.255.255.0
user lite
ip-tunnel bind address 10.8.240.2
log user-login enable
session-connections 100
max-onlines 1000
force-logout max-onlines enable
service enable

安全策略：

 rule 15 name untrust_to_local
action pass
counting enable
source-zone untrust
destination-zone local
service ping
service Port_10443

后面做映射方式配置：

 nat server protocol tcp global 113.23.169.23 10444 inside 10.8.254.1 10443

inode重装，装新版本试试