SR6602-X1 配置问题

这是6602的配置

<6602-X>dis cu # version 5.20, Release 3302 # sysname 6602-X # ftp server enable # ip local policy-based-route aaa # domain default enable system # telnet server enable # lldp enable # password-recovery enable # acl number 2000 rule 0 permit source 192.168.10.0 0.0.0.255 rule 10 permit source 192.168.2.0 0.0.0.255 rule 20 permit source 192.168.14.0 0.0.0.255 rule 80 permit source 192.168.25.0 0.0.0.255 rule 85 permit source 192.168.26.0 0.0.0.255 rule 90 permit source 192.168.13.0 0.0.0.255 rule 95 permit source 192.168.21.0 0.0.0.255 rule 100 permit source 192.168.22.0 0.0.0.255 rule 105 permit source 192.168.23.0 0.0.0.255 rule 110 permit source 192.168.24.0 0.0.0.255 rule 115 permit source 192.168.27.0 0.0.0.255 rule 120 permit source 192.168.28.0 0.0.0.255 rule 125 permit source 192.168.29.0 0.0.0.255 rule 130 permit source 192.168.30.0 0.0.0.255 rule 135 permit source 192.168.31.0 0.0.0.255 rule 140 permit source 192.168.32.0 0.0.0.255 rule 145 permit source 192.168.5.0 0.0.0.255 rule 155 permit source 192.168.9.0 0.0.0.255 rule 160 permit source 192.168.3.0 0.0.0.255 rule 165 permit source 192.168.11.0 0.0.0.255 rule 175 permit source 192.168.12.0 0.0.0.255 rule 180 permit source 192.168.15.0 0.0.0.255 rule 190 permit source 192.168.33.0 0.0.0.255 rule 195 permit source 192.168.16.0 0.0.0.255 rule 200 permit source 192.168.20.0 0.0.0.255 rule 210 permit source 192.168.8.0 0.0.0.255 rule 215 permit source 192.168.7.0 0.0.0.255 rule 220 permit source 192.168.38.0 0.0.0.255 rule 225 permit source 192.168.37.0 0.0.0.255 rule 230 permit source 192.168.36.0 0.0.0.255 rule 235 permit source 192.168.42.0 0.0.0.255 rule 240 permit source 192.168.43.0 0.0.0.255 rule 245 permit source 192.168.41.0 0.0.0.255 rule 250 permit source 192.168.40.0 0.0.0.255 rule 255 permit source 192.168.44.0 0.0.0.255 rule 265 permit source 192.168.45.0 0.0.0.255 rule 270 permit source 192.168.39.0 0.0.0.255 # acl number 3999 rule 0 permit ip source 192.168.0.0 0.0.255.255 destination 192.168.2.4 0 # domain system access-limit disable state active idle-cut disable self-service-url disable # policy-based-route test permit node 10 if-match reverse-input-interface GigabitEthernet0/0/0 apply ip-address next-hop 219.151.35.1 # policy-based-route aaa permit node 5 if-match acl 3000 apply ip-address next-hop 219.151.35.1 # user-group system group-attribute allow-guest # local-user admin password cipher $c$3$ZoW4Umlnnc3JElswUGHdY7Bg4zcPOGKh15X+JHEF authorization-attribute level 3 service-type telnet service-type web # interface NULL0 # interface GigabitEthernet0/0/0 nat outbound 2000 nat server protocol tcp global  xxx.xxx.xxx.xxx    8088 inside 192.168.2.8 8088 nat server protocol tcp global  xxx.xxx.xxx.xxx    65422 inside 192.168.2.8 65422 nat server protocol tcp global  xxx.xxx.xxx.xxx    22 inside 192.168.2.8 22 nat server protocol tcp global  xxx.xxx.xxx.xxx    any inside 192.168.2.5 any ip address 219.151.35.224 255.255.255.0 ip address 219.151.35.119 255.255.255.0 sub # interface GigabitEthernet0/0/1 nat outbound 2000 nat server protocol tcp global  xxx.xxx.xxx.xxx    8088 inside 192.168.2.8 8088 nat server protocol tcp global  xxx.xxx.xxx.xxx    65422 inside 192.168.2.8 65422 nat server protocol tcp global xxx.xxx.xxx.xxx 22 inside 192.168.2.8 22 nat server protocol tcp global  xxx.xxx.xxx.xxx    any inside 192.168.2.5 any ip address 192.168.9.1 255.255.255.0 ip policy-based-route test # interface GigabitEthernet0/0/2 nat outbound 2000 nat server protocol tcp global  xxx.xxx.xxx.xxx   any inside 192.168.2.5 any ip address xxx.xxx.xxx.xxx    255.255.255.0 ip address xxx.xxx.xxx.xxx    255.255.255.192 sub # interface GigabitEthernet0/0/3 # interface M-GigabitEthernet0/0/0 # nqa entry admin dianxin type icmp-echo destination ip 219.151.35.1 frequency 1000 reaction 1 checked-element probe-fail threshold-type consecutive 1 action-type trap-only route-option bypass-route # ip route-static 0.0.0.0 0.0.0.0 219.151.35.1 track 1 description dianxin ip route-static 192.168.1.0 255.255.255.0 192.168.9.2 ip route-static 192.168.2.0 255.255.255.0 192.168.9.2 ip route-static 192.168.3.0 255.255.255.0 192.168.9.2 ip route-static 192.168.5.0 255.255.255.0 192.168.9.2 ip route-static 192.168.7.0 255.255.255.0 192.168.9.2 ip route-static 192.168.8.0 255.255.255.0 192.168.9.2 ip route-static 192.168.10.0 255.255.255.0 192.168.9.2 ip route-static 192.168.11.0 255.255.255.0 192.168.9.2 ip route-static 192.168.12.0 255.255.255.0 192.168.9.2 ip route-static 192.168.13.0 255.255.255.0 192.168.9.2 ip route-static 192.168.14.0 255.255.255.0 192.168.9.2 ip route-static 192.168.15.0 255.255.255.0 192.168.9.2 ip route-static 192.168.16.0 255.255.255.0 192.168.9.2 ip route-static 192.168.20.0 255.255.255.0 192.168.9.2 ip route-static 192.168.21.0 255.255.255.192 192.168.9.2 ip route-static 192.168.22.0 255.255.255.192 192.168.9.2 ip route-static 192.168.23.0 255.255.255.192 192.168.9.2 ip route-static 192.168.24.0 255.255.255.192 192.168.9.2 ip route-static 192.168.25.0 255.255.255.192 192.168.9.2 ip route-static 192.168.26.0 255.255.255.192 192.168.9.2 ip route-static 192.168.27.0 255.255.255.192 192.168.9.2 ip route-static 192.168.28.0 255.255.255.192 192.168.9.2 ip route-static 192.168.29.0 255.255.255.192 192.168.9.2 ip route-static 192.168.30.0 255.255.255.192 192.168.9.2 ip route-static 192.168.31.0 255.255.255.192 192.168.9.2 ip route-static 192.168.32.0 255.255.255.192 192.168.9.2 ip route-static 192.168.33.0 255.255.255.0 192.168.9.2 ip route-static 192.168.36.0 255.255.255.0 192.168.9.2 ip route-static 192.168.37.0 255.255.255.0 192.168.9.2 ip route-static 192.168.38.0 255.255.255.0 192.168.9.2 ip route-static 192.168.39.0 255.255.255.0 192.168.9.2 ip route-static 192.168.40.0 255.255.255.0 192.168.9.2 ip route-static 192.168.41.0 255.255.255.0 192.168.9.2 ip route-static 192.168.42.0 255.255.255.0 192.168.9.2 ip route-static 192.168.43.0 255.255.255.0 192.168.9.2 ip route-static 192.168.44.0 255.255.255.0 192.168.9.2 ip route-static 192.168.45.0 255.255.255.0 192.168.9.2 # track 1 nqa entry admin dianxin reaction 1 # dhcp enable # load xml-configuration # user-interface con 0 user-interface aux 0 user-interface vty 0 4 authentication-mode scheme # return

现在的问题是网络有点卡顿，个别网站打不开。用户量600，带宽300M(双电信 100M 200M)