H3C 5120 设置Vlan上不了网，VLAN20段拼路由器时还有掉包

# version 7.1.070, Release 6126P20 # sysname H3C # clock timezone Lisbon add 00:00:00 clock protocol none # irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1 # dot1x # dhcp enable # dhcp snooping enable # dns server 192.168.1.1 # lldp global enable # password-recovery enable # vlan 1 # vlan 2 to 5 # dhcp server ip-pool 10 gateway-list 192.168.10.1 network 192.168.10.0 mask 255.255.255.0 dns-list 192.168.10.1 # dhcp server ip-pool 20 gateway-list 192.168.20.1 network 192.168.20.0 mask 255.255.255.0 dns-list 192.168.20.1 # dhcp server ip-pool 30 gateway-list 192.168.30.1 network 192.168.30.0 mask 255.255.255.0 dns-list 192.168.30.1 # dhcp server ip-pool 40 gateway-list 192.168.40.1 network 192.168.40.0 mask 255.255.255.0 dns-list 192.168.40.1 # interface NULL0 # interface Vlan-interface1 ip address 192.168.1.238 255.255.255.0 # interface Vlan-interface2 ip address 192.168.10.1 255.255.255.0 # interface Vlan-interface3 ip address 192.168.20.1 255.255.255.0 # interface Vlan-interface4 ip address 192.168.30.1 255.255.255.0 # interface Vlan-interface5 ip address 192.168.40.1 255.255.255.0 # interface GigabitEthernet1/0/1 # interface GigabitEthernet1/0/2 port link-type trunk port trunk permit vlan 1 port trunk pvid vlan 2 # interface GigabitEthernet1/0/3 port access vlan 2 # interface GigabitEthernet1/0/4 port access vlan 2 # interface GigabitEthernet1/0/5 port access vlan 2 # interface GigabitEthernet1/0/6 port access vlan 2 # interface GigabitEthernet1/0/7 port access vlan 2 # interface GigabitEthernet1/0/8 port access vlan 2 # interface GigabitEthernet1/0/9 port access vlan 2 # interface GigabitEthernet1/0/10 port access vlan 2 # interface GigabitEthernet1/0/11 port access vlan 2 # interface GigabitEthernet1/0/12 port access vlan 2 # interface GigabitEthernet1/0/13 port access vlan 2 # interface GigabitEthernet1/0/14 port access vlan 2 # interface GigabitEthernet1/0/15 port access vlan 2 # interface GigabitEthernet1/0/16 port access vlan 5 # interface GigabitEthernet1/0/17 port access vlan 5 # interface GigabitEthernet1/0/18 port access vlan 5 # interface GigabitEthernet1/0/19 port access vlan 5 # interface GigabitEthernet1/0/20 port access vlan 3 # interface GigabitEthernet1/0/21 port access vlan 3 # interface GigabitEthernet1/0/22 # interface GigabitEthernet1/0/23 port access vlan 4 # interface GigabitEthernet1/0/24 port access vlan 4 # interface GigabitEthernet1/0/25 # interface GigabitEthernet1/0/26 # interface GigabitEthernet1/0/27 # interface GigabitEthernet1/0/28 # scheduler logfile size 16 # line class aux user-role network-admin # line class vty user-role network-operator # line aux 0 user-role network-admin # line vty 0 63 user-role network-operator # ip route-static 0.0.0.0 24 Vlan-interface1 192.168.1.1 # radius scheme system user-name-format without-domain # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$gXI6tMqXqmP3TNI5$hlSAYTA7v1JKVJ7xTH/HAPfLc8TMCCccFo7K/DRy9Ndf9+HcYQkOipuJL7G8X7cvA36tEPaH/Vax14Lsq/RU6Q== service-type http https authorization-attribute user-role network-admin authorization-attribute user-role network-operator # ip http enable ip https enable # return

目的：10.20.30段可以上网，40段不可以上网，内部互通，