IPsec VPN不能访问公网

做完IPsec VPN后，发现做VPN的设备不能访问公网，别的没做的可以访问

但是vpn可以起来，vpn之间可以互访。

请帮忙看下配置。

以下是配置：

# nat static outbound 172.1.1.26 172.7.16.16

   nat static outbound 172.1.1.29 172.7.16.17

#

interface LoopBack0 ip address 172.7.16.16 255.255.255.255

#

interface LoopBack1 ip address 172.7.16.17 255.255.255.255

#

interface GigabitEthernet1/0/3

port link-mode route ip address

X.X.X.X 32

nat outbound 3009 

nat static enable ipsec apply policy IPsec

#

acl advanced 3009 rule 0 permit ip source 172.1.1.26 0 destination 172.7.16.16 0

rule 5 permit ip source 172.1.1.29 0 destination 172.7.16.17 0 rule

10 permit ip

#

acl advanced name IPsec_IPv4_1

rule 1 permit ip source 172.7.16.16 0 destination 172.2.0.0 0.0.15.255

rule 2 permit ip source 172.7.16.17 0 destination 172.2.0.0 0.0.15.255

#

ipsec transform-set ipsec_IPv4_1

esp encryption-algorithm aes-cbc-256

esp authentication-algorithm sha1

#

ipsec policy LF 1 isakmp transform-set IPsec_IPv4_1

security acl name IPsec_IPv4_1

local-address X.X.X.X

remote-address X.X.X.X

ike-profile ipsec_IPv4_1

sa duration time-based 3600

sa duration traffic-based 1843200

#

ike profile ipsec_IPv4_1 keychain ipsec_IPv4_1

local-identity address X.X.X.X

match remote identity address X.X.X.X

match local address GigabitEthernet1/0/3

proposal 1

#

ike keychain ipsec_IPv4_1

match local address GigabitEthernet1/0/3

pre-shared-key address X.X.X.X key cipher