无法上网

用命令能ping通服务器，但是无法上网：配置如下

 version 7.1.059, ESS 0304
#
 sysname orphic_8038
#
 telnet server enable
#
 port-security enable
#
 ip pool aaa 100.19.0.2 100.19.0.20
 ip pool aaa gateway 100.19.0.1
#
 dhcp enable
#
 password-recovery enable
#
vlan 1
#
vlan 10
#
vlan 20
#
dhcp server ip-pool 1
 gateway-list 192.168.10.1
 network 192.168.10.0 mask 255.255.255.0
 dns-list 211.139.29.150 211.139.29.170
#             
wlan service-template 1
 ssid WDJY    
 vlan 10      
 akm mode psk 
 preshared-key pass-phrase cipher $c$3$M/vn378xxtf/DiHCjiT+Xg9b75OEXOvKCp2dnbPq
 cipher-suite ccmp
 security-ie rsn
 service-template enable
#             
controller Cellular0/0
#             
controller Cellular0/1
#             
interface Virtual-Template1
 ppp authentication-mode chap domain system
 remote address pool aaa
#             
interface NULL0
#             
interface Vlan-interface10
 ip address 192.168.10.1 255.255.255.0
#             
interface Vlan-interface20
 ip address 192.168.11.1 255.255.255.0
#             
interface GigabitEthernet0/0
 port link-mode route
 nat outbound 3000
#             
interface GigabitEthernet0/4
 port link-mode route
 ip address dhcp-alloc
 nat outbound 3000
#             
interface GigabitEthernet0/5
 port link-mode route
 speed 100    
 ip address 39.129.117.62 255.255.255.128
 nat outbound 3000
#             
interface GigabitEthernet0/1
 port link-mode bridge
 port access vlan 10
#             
interface GigabitEthernet0/2
 port link-mode bridge
 port access vlan 10
#             
interface GigabitEthernet0/3
 port link-mode bridge
#             
interface WLAN-Radio0/0
#             
interface WLAN-Radio0/1
 service-template 1
 channel 11   
#             
security-zone name Local
#             
security-zone name Trust
 import interface Vlan-interface10
 import interface Vlan-interface20
#             
security-zone name DMZ
#             
security-zone name Untrust
 import interface GigabitEthernet0/0
 import interface GigabitEthernet0/4
#             
zone-pair security source Any destination Any
 packet-filter 3000
#             
 scheduler logfile size 16
#             
line class console
 user-role network-admin
#             
line class tty
 user-role network-operator
#             
line class vty
 user-role network-operator
#             
line con 0    
 user-role network-admin
#             
line vty 0 4  
 authentication-mode scheme
 user-role network-admin
 user-role network-opeator
 user-role network-operator
#             
line vty 5 63 
 user-role network-operator
#             
 ip route-static 0.0.0.0 0 39.129.117.1
#             
acl advanced 3000
 rule 0 permit ip
#             
domain system 
 authentication ppp local
#             
 aaa session-limit ftp 16
 domain default enable system
#             
role name level-0
 description Predefined level-0 role
#             
role name level-1
 description Predefined level-1 role
#             
role name level-2
 description Predefined level-2 role
#             
role name level-3
 description Predefined level-3 role
#             
role name level-4
 description Predefined level-4 role
#             
role name level-5
 description Predefined level-5 role
#             
role name level-6
 description Predefined level-6 role
#             
role name level-7
 description Predefined level-7 role
#             
role name level-8
 description Predefined level-8 role
#             
role name level-9
 description Predefined level-9 role
#             
role name level-10
 description Predefined level-10 role
#             
role name level-11
 description Predefined level-11 role
#             
role name level-12
 description Predefined level-12 role
#             
role name level-13
 description Predefined level-13 role
#             
role name level-14
 description Predefined level-14 role
#             
user-group system
#             
local-user admin class manage
 password hash $h$6$g/JSXnbFXzwK6kZa$cRZj+FsH+FZX1+J5NMOUdpivwW/+gW6AWW4AubDdL1GvtiIRqQCDLR6w30C8BwfQnOqERwbT/2po/j0I7MB4sg==
 service-type ssh telnet terminal http https
 authorization-attribute user-role level-15
 authorization-attribute user-role network-admin
 authorization-attribute user-role network-operator
#             
local-user system class network
 password cipher $c$3$oeBypvwTGA4FCupIxVBaEhU2msQQAawcCQ==
 service-type ppp
 authorization-attribute user-role network-operator
#             
l2tp-group 1 mode lns
 allow l2tp virtual-template 1
 undo tunnel authentication
 tunnel name LNS
#             
 l2tp enable  
#             
 http-proxy enable
#             
ips policy default
#