c1100路由，配置如下：
version 17.16 service timestamps debug datetime msec service timestamps log datetime msec service call-home platform qfp utilization monitor load 80 platform hardware throughput crypto 50000 ! hostname BJ_JYGJ_2502 ! boot-start-marker boot system bootflash:c1100-universalk9.17.16.01a.SPA.bin ! Warning: Booting with bundle mode will be deprecated in the near future. Migration to install mode is required. boot-end-marker ! ! no aaa new-model ! ip name-server 8.8.8.8 114.114.114.114 ip domain name BJ_JYGJ_2502 ! ! ! ! ! ! ip dhcp excluded-address 192.168.0.0 192.168.0.2 ip dhcp excluded-address 192.168.0.255 255.255.255.255 ! ip dhcp pool BJ_JYGJ_2502 network 192.168.0.0 255.255.255.0 lease infinite ! ! ! login on-success log ! ! ! ! ! ! ! subscriber templating ! ! ! ! ! ! vpdn enable ! ! ! ! ! ! ! ! ! ! crypto pki trustpoint TP-self-signed-1499619169 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-1499619169 revocation-check none rsakeypair TP-self-signed-1499619169 hash sha512 ! crypto pki trustpoint SLA-TrustPoint enrollment pkcs12 revocation-check crl hash sha512 ! ! crypto pki certificate chain TP-self-signed-1499619169 crypto pki certificate chain SLA-TrustPoint ! ! ! ! ! ! ! ! ! diagnostic bootup level minimal ! no license feature hseck9 license udi pid C1161-8P sn FGL2448L6HM license boot suite FoundationSuiteK9 license boot level uck9 memory free low-watermark processor 71884 ! spanning-tree extend system-id ! ! username cisco privilege 15 secret 9 $9$wvJtETEeVlhlwk$tTuSsPU9xv2rpHENQYGBzvzpagu4DCcC4LSY/Dytf0c ! redundancy mode none ! ! ! ! ! ! ! vlan group BEIJING_UNICOM vlan-list 3961 vlan internal allocation policy ascending ! vlan 3961 name 2_INTERNET_R_VID_3961 ! no lldp tlv-select management-address no lldp tlv-select port-description no lldp tlv-select system-capabilities no lldp tlv-select system-description no lldp tlv-select system-name no lldp tlv-select port-vlan no lldp tlv-select mac-phy-cfg no lldp tlv-select power-management no lldp tlv-select 4-wire-power-management lldp run ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! interface GigabitEthernet0/0/0 no ip address ip mtu 1452 ip tcp adjust-mss 1412 media-type sfp no negotiation auto ipv6 mtu 1500 ipv6 tcp adjust-mss 1400 ! interface GigabitEthernet0/0/0.100 encapsulation dot1Q 3961 ip nat inside pppoe enable group global pppoe-client dial-pool-number 1 ! interface GigabitEthernet0/0/1 no ip address negotiation auto ! interface GigabitEthernet0/1/0 ! interface GigabitEthernet0/1/1 ! interface GigabitEthernet0/1/2 ! interface GigabitEthernet0/1/3 ! interface GigabitEthernet0/1/4 ! interface GigabitEthernet0/1/5 ! interface GigabitEthernet0/1/6 switchport ! interface GigabitEthernet0/1/7 switchport ! interface Vlan1 ip address 192.168.0.254 255.255.255.0 ! interface Dialer1 mtu 1492 ip address negotiated no ip redirects ip nat outside ip access-group NAT_ACL in ip access-group 1 out encapsulation ppp dialer pool 1 ppp authentication chap pap callin ! ip forward-protocol nd ip forward-protocol udp ip http server ip http authentication local ip http secure-server ! ip nat inside source list 1 interface Dialer1 overload ip nat inside source list NAT_ACL interface Dialer1 overload ip route 0.0.0.0 0.0.0.0 Dialer1 ip ssh bulk-mode 131072 ! ip access-list extended NAT_ACL 10 permit ip any any ip access-list standard 1 10 permit 192.168.0.0 0.0.0.255 dialer-list 1 protocol ip permit route-map track-primary-if permit 1 match ip address 197 ! ! ! ! control-plane ! ! mgcp behavior rsip-range tgcp-only mgcp behavior comedia-role none mgcp behavior comedia-check-media-src disable mgcp behavior comedia-sdp-force disable ! mgcp profile default ! ! ! ! ! ! line con 0 stopbits 1 line vty 0 4 login local length 0 transport input ssh line vty 5 14 login transport input ssh ! call-home ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications. contact-email-addr sch-smart-licensing@cisco.com profile "CiscoTAC-1" active destination transport-method http ! ! ! ! ! ! end
目前测试从vlan1可联通外网
但是内网设备仍然无法上网，已经配置静态路由到Dialer1，相关nat也已配置，请教各位老师目前问题出在哪里，谢谢
1 个已接受解答
已接受的解答
