ICG3000采用Client-Initiated模式建立L2TP隧道配置问题，请指教，谢谢！

之前已经提过好几个相同的问题，但是参考大家的方法还是不行，参考“https://www.h3c.com/cn/d_201807/1094064_30005_0.htm#_Toc519179551”也不行，再次麻烦各位指教，谢谢！备注：172.22.30.34这个IP（移动内网）可以访问外网，作为默认路由地址转发，其他公网地址采用策略路由给不同的部门和应用使用，所有的这些IP都不是实际在用地址，只用于举例。  

[1F_ICG3000D]disp cuversion 5.20, Release 2516P20l2tp enableip pool 5 192.168.40.2 192.168.40.20domain default enable systemacl number 3010 description To:2F_Office rule 0 permit ip source 192.168.30.0 0.0.0.255 acl number 3020 description To:zonghebu rule 0 permit ip source 192.168.35.0 0.0.0.255acl number 3030 description To:Ftp rule 0 permit ip source 192.168.25.0 0.0.0.255 destination 10.48.55.0 0.0.0.255acl number 3040 description To:DCN rule 0 permit ip source 192.168.25.0 0.0.0.255 destination 10.0.0.0 0.255.255.255domain system authentication ppp local access-limit disable state active idle-cut disable self-service-url disable ip pool 5 192.168.40.2 192.168.40.30policy-based-route aaa permit node 10 if-match acl 3010 apply ip-address next-hop 222.111.221.65policy-based-route aaa permit node 20 if-match acl 3020 apply ip-address next-hop 222.112.221.65policy-based-route aaa permit node 30 if-match acl 3030 apply ip-address next-hop 222.113.221.65policy-based-route aaa permit node 40 if-match acl 3040 apply ip-address next-hop 10.38.23.65local-user whjk service-type ppppassword simple 111111l2tp-group 1 undo tunnel authentication allow l2tp virtual-template 1 tunnel name LNSinterface Virtual-Template1 ppp authentication-mode chap domain system remote address pool 5 ip address 192.168.40.1 255.255.255.0interface GigabitEthernet0/0 (WAN)port link-mode route nat outboundip address 172.22.30.34 255.255.255.192 description To:CMNETinterface GigabitEthernet0/1 (WAN)port link-mode route nat outbound ip address 10.38.23.66 255.255.255.248interface GigabitEthernet0/2 (WAN)port link-mode route nat outbound ip address 222.111.221.66 255.255.255.252interface GigabitEthernet0/3 (WAN)port link-mode route description To:2F_Office nat outbound ip address 222.112.221.65 255.255.255.252interface GigabitEthernet0/4 (WAN)port link-mode route description To:zonghebu nat outbound ip address 222.113.221.65 255.255.255.252interface GigabitEthernet0/8 (LAN)port link-mode bridge port link-type trunk port trunk permit vlan 1 100 200 300ip route-static 0.0.0.0 0.0.0.0 GigabitEthernet0/0 172.22.30.1user-interface tty 12 user-interface aux 0 user-interface vty 0 4 authentication-mode scheme