H3c-5500上网

为什么Vlan20不能上网？Vlan40可以上网，25口为上行口

version 7.1.070, ESS 1110P05
#
 sysname H3C
#
 irf mac-address persistent timer
 irf auto-update enable
 undo irf link-delay
 irf member 1 priority 1
#
 dhcp enable
 dhcp server forbidden-ip 192.168.10.1 192.168.10.10
 dhcp server forbidden-ip 192.168.20.1 192.168.20.10
 dhcp server forbidden-ip 192.168.30.1 192.168.30.10
 dhcp server forbidden-ip 192.168.40.1 192.168.40.10
 dhcp server forbidden-ip 192.168.40.190 192.168.40.254
#
 lldp global enable
#
 password-recovery enable
#
vlan 1
#
vlan 9 to 10
#
vlan 20
#
vlan 30
#
vlan 40
#
traffic classifier 1 operator and
 if-match source-mac 309c-233a-6c3c
#
traffic classifier wifi operator and
 if-match acl 3001
#
traffic behavior 1
 filter deny
#
traffic behavior wifi
 filter deny
#
qos policy 1
 classifier 1 behavior 1
#
qos policy wifi
 classifier wifi behavior wifi
#
 stp global enable
#
dhcp server ip-pool vlan10
 gateway-list 192.168.10.1
 network 192.168.10.0 mask 255.255.255.0
 dns-list 202.102.154.3 202.102.152.3
#
dhcp server ip-pool vlan20
 gateway-list 192.168.20.1
 network 192.168.20.0 mask 255.255.255.0
 dns-list 202.102.154.3 202.102.152.3
#
dhcp server ip-pool vlan30
 gateway-list 192.168.30.1
 network 192.168.30.0 mask 255.255.255.0
 dns-list 202.102.154.3 202.102.152.3
#
dhcp server ip-pool vlan40
 gateway-list 192.168.40.1
 network 192.168.40.0 mask 255.255.255.0
 dns-list 202.102.154.3 202.102.152.3
 static-bind ip-address 192.168.40.24 mask 255.255.255.0 hardware-address 309c-2
33a-6c3c
 static-bind ip-address 192.168.40.41 mask 255.255.255.0 hardware-address 309c-2
350-14e2
 static-bind ip-address 192.168.40.45 mask 255.255.255.0 hardware-address 309c-2
350-9bd4
#
interface NULL0
#
interface Vlan-interface9
 description to router
 ip address 192.168.68.2 255.255.255.0
#
interface Vlan-interface10
 description wifi
 ip address 192.168.10.1 255.255.255.0
 dhcp server apply ip-pool vlan10
#
interface Vlan-interface20
 description jiankong
 ip address 192.168.20.1 255.255.255.0
 dhcp server apply ip-pool vlan20
#
interface Vlan-interface30
 description neiwang
 ip address 192.168.30.1 255.255.255.0
 dhcp server apply ip-pool vlan30
#
interface Vlan-interface40
 description waiwang
 ip address 192.168.40.1 255.255.255.0
 dhcp server apply ip-pool vlan40
#
interface FortyGigE1/0/33
 port link-mode bridge
#
interface FortyGigE1/0/34
 port link-mode bridge
#
interface GigabitEthernet1/0/1
 port link-mode bridge
 port access vlan 10
 qos apply policy wifi inbound
#
interface GigabitEthernet1/0/2
 port link-mode bridge
 port access vlan 10
 qos apply policy wifi inbound
#
interface GigabitEthernet1/0/3
 port link-mode bridge
 port access vlan 20
#
interface GigabitEthernet1/0/4
 port link-mode bridge
 port access vlan 20
#
interface GigabitEthernet1/0/5
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/6
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/7
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/8
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/9
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/10
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/11
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/12
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/13
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/14
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/15
 port link-mode bridge
 port access vlan 30
#
interface GigabitEthernet1/0/16
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/17
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/18
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/19
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/20
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/21
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/22
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/23
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/24
 port link-mode bridge
 port access vlan 40
#
interface GigabitEthernet1/0/25
 port link-mode bridge
 port access vlan 9
 combo enable copper
#
interface GigabitEthernet1/0/26
 port link-mode bridge
 port access vlan 9
 combo enable copper
#
interface GigabitEthernet1/0/27
 port link-mode bridge
 port access vlan 9
 combo enable copper
#
interface GigabitEthernet1/0/28
 port link-mode bridge
 port access vlan 9
 combo enable copper
#
interface GigabitEthernet1/0/29
 port link-mode bridge
#
interface GigabitEthernet1/0/30
 port link-mode bridge
#
interface M-GigabitEthernet0/0/0
#
interface Ten-GigabitEthernet1/0/31
 port link-mode bridge
#
interface Ten-GigabitEthernet1/0/32
 port link-mode bridge
#
 scheduler logfile size 16
#
line class aux
 user-role network-admin
#
line class vty
 user-role network-operator
#
line aux 0
 authentication-mode password
 user-role network-admin
 set authentication password hash $h$6$5cew9wFIUtD05w1z$wXV4a6BJMLAOBB+UODvTWctT
RbUdaeakZ5Xyw7zEe4jy7pYivNJg3nvvlb7vkJkgnDHoN+CnAo5+Uh56Bg77GQ==
#
line vty 0 4
 user-role level-3
 user-role network-operator
 set authentication password hash $h$6$QQ+ERLY+0C7X0mtM$GTeB1aOEWy33p0dxad9+FvUj
l0OSY2xKvTQy7xi22rkQlb6rRnVb9VCBbhRF4TrNk+dtisyZDNd18g8etPgazQ==
#
line vty 5 63
 user-role network-operator
#
 ip route-static 0.0.0.0 0 192.168.68.1
#
acl advanced 3001
 rule 20 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.20.0 0.0.0.25
5
 rule 30 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.30.0 0.0.0.25
5
 rule 40 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.40.0 0.0.0.25
5
#
radius scheme system
 user-name-format without-domain
#
domain system
#
 domain default enable system
#
role name level-0
 description Predefined level-0 role
#
role name level-1
 description Predefined level-1 role
#
role name level-2
 description Predefined level-2 role
#
role name level-3
 description Predefined level-3 role
#
role name level-4
 description Predefined level-4 role
#
role name level-5
 description Predefined level-5 role
#
role name level-6
 description Predefined level-6 role
#
role name level-7
 description Predefined level-7 role
#
role name level-8
 description Predefined level-8 role
#
role name level-9
 description Predefined level-9 role
#
role name level-10
 description Predefined level-10 role
#
role name level-11
 description Predefined level-11 role
#
role name level-12
 description Predefined level-12 role
#
role name level-13
 description Predefined level-13 role
#
role name level-14
 description Predefined level-14 role
#
user-group system
#
return