SecPath F100-C-G2配置PPPOE无法上网

新买的SecPath F100-C-G2配置PPPOE无法上网

#
 telnet server enable
#
 irf mac-address persistent timer
 irf auto-update enable
 undo irf link-delay
 irf member 1 priority 1
#
nat address-group 0
 address 172.21.184.1 172.21.184.254
#
 dhcp enable
 dhcp server forbidden-ip 172.21.184.1 172.21.184.99
 dhcp server forbidden-ip 172.21.184.240 172.21.184.254
 dhcp relay client-information record
#
 dns server 218.85.152.99
 dns server 218.85.157.99
#
 password-recovery enable
#
vlan 1
#
object-group ip address 172.21.184.0/255.255.255.0
#
dhcp server ip-pool 0
 gateway-list 172.21.184.1
 network 172.21.184.0 mask 255.255.255.0
 dns-list 218.85.152.99 218.85.157.99
#
interface Dialer1
 ppp chap password cipher $c$3$Fg0XbLVubJnCDPlUH/CxeexjXmMVzEyPCg==
 ppp chap user XXXXX
 ppp ipcp dns request
 ppp pap local-user XXXXXX password cipher $c$3$wtH+6bYjCrWrT/IdPJr5JzSU1
dNdl71hg==
 dialer bundle enable
 dialer peer-name pppoeclient
 dialer-group 1
 ip address ppp-negotiate
 nat outbound 3000
#
interface NULL0
#
interface GigabitEthernet1/0/0
 port link-mode route
 combo enable fiber
 ip address 192.168.0.1 255.255.255.0
#
interface GigabitEthernet1/0/1
 port link-mode route
 combo enable fiber
#
interface GigabitEthernet1/0/2
 port link-mode route
 ip address 192.168.1.1 255.255.255.0
#
interface GigabitEthernet1/0/3
 port link-mode route
#
interface GigabitEthernet1/0/4
 port link-mode route
 nat outbound 3000
 pppoe-client dial-bundle-number 1
#
interface GigabitEthernet1/0/5
 port link-mode route
 ip address 172.21.184.1 255.255.255.0
#
interface GigabitEthernet1/0/6
 port link-mode route
#
object-policy ip Any-Any
 rule 0 pass
#
object-policy ip Trust-Local
 rule 0 pass
#
object-policy ip Trust-Trust
 rule 0 pass
#
object-policy ip Trust-Untrust
 rule 0 pass source-ip 172.21.184.0/255.255.255.0
#
security-zone name Local
#
security-zone name Trust
 import interface GigabitEthernet1/0/5
#
security-zone name DMZ
#
security-zone name Untrust
 import interface Dialer1
 import interface GigabitEthernet1/0/4
#
security-zone name Management
 import interface GigabitEthernet1/0/0
 import interface GigabitEthernet1/0/2
#
zone-pair security source Any destination Any
 object-policy apply ip Any-Any
#
zone-pair security source Trust destination Local
 object-policy apply ip Trust-Local
#
zone-pair security source Trust destination Trust
 object-policy apply ip Trust-Trust
#
zone-pair security source Trust destination Untrust
 object-policy apply ip Trust-Untrust
#
 scheduler logfile size 16
#
line class aux
 user-role network-operator
#
line class console
 user-role network-admin
#
line class vty
 user-role network-operator
#
line aux 0
 user-role network-admin
#
line con 0
 authentication-mode scheme
 user-role network-admin
#
line vty 0 63
 authentication-mode scheme
 user-role network-admin
#
 ip route-static 0.0.0.0 0 Dialer1
#
 ssh server enable
#
acl advanced 3000
 rule 10 permit ip source 172.21.184.0 0.0.0.255
#
domain system
#
 aaa session-limit ftp 16
 aaa session-limit telnet 16
 aaa session-limit ssh 16
 domain default enable system
#
user-group system
#
local-user admin class manage
 password hash $h$6$pwSypZoSHCm8aBTX$hwPP4NdNahnffiA/QxiU9n8nq96NuK5CDwwIL7C55M
WGjq0/MJ5glqYX0N0QEk5dqdD4XuYsepUHki5sXZiRg==
 service-type ssh telnet terminal http https
 authorization-attribute user-role level-3
 authorization-attribute user-role network-admin
 authorization-attribute user-role network-operator
#
 ip https enable
#
return