H3C SecPath F1000-A-G防火墙 做PPPOE拨号上网，客户端计算机无法上网

如题：H3C SecPath F1000-A-G防火墙 做PPPOE拨号上网，客户端计算机无法上网，望答复，谢谢！

配置如下：

#

 version 5.20, Release 5142P02

#

 sysname H3C

#

 undo voice vlan mac-address 00e0-bb00-0000

#

 interzone policy default by-priority

#

 domain default enable system

#

 undo alg dns

 undo alg rtsp

 undo alg h323

 undo alg sip

 undo alg sqlnet

 undo alg pptp

 undo alg ils

 undo alg nbt

 undo alg msn

 undo alg qq

 undo alg tftp

 undo alg sccp

 undo alg gtp

#

session synchronization enable

#

 password-recovery enable

#

acl number 3000

 description nat-private

 rule 0 permit tcp

#

vlan 1

#

domain system

 access-limit disable

 state active

 idle-cut disable

 self-service-url disable

#

pki domain default

  crl check disable

#

dhcp server ip-pool lan

 network 192.168.1.0 mask 255.255.255.0

 gateway-list 192.168.1.1

 dns-list 114.114.114.114

#

user-group system

 group-attribute allow-guest

#

local-user admin

 password cipher $c$3$MyoXHhTJ+Z7PkjZKuVODjommxJp2oyBX

 authorization-attribute level 3

 service-type telnet

 service-type web

#

interface Dialer1

 link-protocol ppp

 ppp chap user user11111

 ppp chap password cipher password111

 ppp pap local-user user11111 password cipher password111

 ppp ipcp dns request

 ip address ppp-negotiate

 dialer user pppoeclient

 dialer-group 1

 dialer bundle 1

#

interface NULL0

#

interface GigabitEthernet0/0

 port link-mode route

 ip address 192.168.1.1 255.255.255.0

#

interface GigabitEthernet0/1

 port link-mode route

#

interface GigabitEthernet0/2

 port link-mode route

#

interface GigabitEthernet0/3

 port link-mode route

#

interface GigabitEthernet0/4

 port link-mode route

#

interface GigabitEthernet0/5

 port link-mode route

 pppoe-client dial-bundle-number 1

 undo dhcp select server global-pool

#

vd Root id 1

#

zone name Management id 0

 priority 100

 import interface GigabitEthernet0/0

zone name Local id 1

 priority 100

zone name Trust id 2

 priority 85

zone name DMZ id 3

 priority 50

zone name Untrust id 4

 priority 5

switchto vd Root

 zone name Management id 0

 ip virtual-reassembly

 zone name Local id 1

 ip virtual-reassembly

 zone name Trust id 2

 ip virtual-reassembly

 zone name DMZ id 3

 ip virtual-reassembly

 zone name Untrust id 4

 ip virtual-reassembly

#

 dhcp enable

#

 dialer-rule 1 ip permit

#

 load xml-configuration

#

 load tr069-configuration

#

user-interface con 0

user-interface vty 0 4

 authentication-mode scheme

#

return