问

ICG3000S双网关不通，

广域网接口

2019-05-26提问

0关注
1收藏，1267浏览

zhiliao_HcXs6

zhiliao_HcXs6 零段

粉丝：0人关注：0人

问题描述：

ICG3000S配置了两个网关，其中有一个就是不通，除非断掉另外一个网关，请大神帮帮忙，华三也没有在线客服，另外我的配置，貌似telnet也无法使用，

组网及组网描述：

#
version 7.1.064, Release 0605P21
#
sysname H3C
#
clock timezone Beijing add 08:00:00
clock protocol ntp
#
telnet server enable
#
ip pool l2tp1 10.0.0.100 10.0.0.254
#
password-recovery enable
#
vlan 1
#
vlan 10
#
vlan 20
#
vlan 210
#
controller Cellular0/0
#
interface Aux0
#
interface Virtual-Template0
#
interface Virtual-Template1
ppp authentication-mode pap
remote address pool l2tp1
ip address 10.0.0.1 255.255.255.0
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.110.1 255.255.255.0
undo dhcp select server
#
interface Vlan-interface10
ip address 192.168.254.1 255.255.255.0
#
interface Vlan-interface20
ip address 172.16.0.1 255.255.0.0
#
interface Vlan-interface210
ip address 192.168.210.1 255.255.255.0
#
interface GigabitEthernet0/0
port link-mode route
description Multiple_Line
bandwidth 100000
ip address 1.1.1.1 255.255.255.252
dns server 114.114.114.114
packet-filter name WebTelnet2 inbound
nat outbound
nat server protocol tcp global 11.1.1 80 inside 172.16.1.2 80
nat server protocol tcp global 1.1.1.1 8999 inside 192.168.210.4 1433
nat static enable
#
interface GigabitEthernet0/1
port link-mode route
description Multiple_Line
bandwidth 100000
ip address 2.2.2.2 255.255.255.252
dns server 114.114.114.114
packet-filter name WebHttpHttps3 inbound
packet-filter name WebTelnet3 inbound
nat outbound
#
interface GigabitEthernet0/2
port link-mode route
#
interface GigabitEthernet0/27
port link-mode route
#
interface GigabitEthernet0/3
port link-mode bridge
#
interface GigabitEthernet0/4
port link-mode bridge
#
interface GigabitEthernet0/5
port link-mode bridge
#
interface GigabitEthernet0/6
port link-mode bridge
#
interface GigabitEthernet0/7
port link-mode bridge
#
interface GigabitEthernet0/8
port link-mode bridge
#
interface GigabitEthernet0/9
port link-mode bridge
port access vlan 20
#
interface GigabitEthernet0/10
port link-mode bridge
port access vlan 20
#
interface GigabitEthernet0/11
port link-mode bridge
port access vlan 20
#
interface GigabitEthernet0/12
port link-mode bridge
port access vlan 20
#
interface GigabitEthernet0/13
port link-mode bridge
port access vlan 20
#
interface GigabitEthernet0/14
port link-mode bridge
port access vlan 20
#
interface GigabitEthernet0/15
port link-mode bridge
port access vlan 20
#
interface GigabitEthernet0/16
port link-mode bridge
port access vlan 20
#
interface GigabitEthernet0/17
port link-mode bridge
port access vlan 210
#
interface GigabitEthernet0/18
port link-mode bridge
port access vlan 210
#
interface GigabitEthernet0/19
port link-mode bridge
port access vlan 210
#
interface GigabitEthernet0/20
port link-mode bridge
port access vlan 210
#
interface GigabitEthernet0/21
port link-mode bridge
port access vlan 210
#
interface GigabitEthernet0/22
port link-mode bridge
port access vlan 210
#
interface GigabitEthernet0/23
port link-mode bridge
port access vlan 10
#
interface GigabitEthernet0/24
port link-mode bridge
port access vlan 10
#
interface GigabitEthernet0/25
port link-mode bridge
port access vlan 10
#
interface GigabitEthernet0/26
port link-mode bridge
port access vlan 10
#
security-zone name Local
#
security-zone name Trust
#
security-zone name DMZ
#
security-zone name Untrust
#
security-zone name Management
#
scheduler logfile size 16
#
line class aux
user-role network-admin
#
line class tty
user-role network-operator
#
line class vty
user-role network-operator
#
line aux 0
user-role network-admin
#
line vty 0 63
user-role network-operator
#
ip route-static 0.0.0.0 0 GigabitEthernet0/0 1.1.1.2
ip route-static 0.0.0.0 0 GigabitEthernet0/1 2.2.2.1
#
ntp-service enable
ntp-service unicast-server 118.24.236.43
ntp-service unicast-server 120.25.108.11
#
acl advanced name WebHttpHttps3
rule 65533 deny tcp destination-port eq www
rule 65534 deny tcp destination-port eq 443
#
acl advanced name WebTelnet2
rule 65533 deny tcp destination-port eq telnet
#
acl advanced name WebTelnet3
rule 65533 deny tcp destination-port eq telnet
#
domain system
#
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
local-user admin class manage
password hash $h$6$3Bj+4AXRXcE/WYrr$Axc0+brniSOqk1GX3x6RKyuHUBFBrpKzX/uRCDCnoRT5bFVN6WeWI4msXZU+Lv3yYUeDCHxpE3g3fAaLK913KA==
service-type telnet http https
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator
#
local-user root class manage
password hash $h$6$0/7l+pdKfxmdCo9U$c1m+FHJ9jdkg8eS8wI1ltFfMs73L0A6vBTMkdWBXGD8SOnAJn7BY5q/THT9DZWRHxJkSPIhdZUVrKBsDYnPmMg==
service-type telnet
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator
#
local-user liurui class network
password cipher $c$3$9BN90km6nu0SDoQl7gMI3w2DsBP2Gu90fuQM
service-type portal
service-type ppp
authorization-attribute user-role network-operator
#
l2tp-group 1 mode lns
allow l2tp virtual-template 1
undo tunnel authentication
#
l2tp enable
#
ip http port 8998
ip http enable
#
wlan global-configuration
control-address disable
#
wlan ap-group default-group
#
return