F100-C-A防火牆配置

防火牆外網PPPOE  外網口為1/0/0口 ，內網為1/0/6口

已經正常配置完成，內網電腦已經可以正常上網

通過telnet到防火牆後 配置DNS為：223.5.5.5

問題：防火牆無通過TELNET上去後無法PING通 外網 也無法解析域名

配置如下：

[H3C]dis cu

#

 version 7.1.064, Release 9560P40

#

 sysname H3C

#

#

interface Dialer0

 ppp chap password cipher --------------------

 ppp chap user 043114149279 

 ppp pap local-user 043114149279 password cipher--------------------

 dialer bundle enable

 dialer timer idle 0

 ip address ppp-negotiate

 nat outbound

#

#

interface GigabitEthernet1/0/0

 port link-mode route

 pppoe-client dial-bundle-number 0

#

interface GigabitEthernet1/0/1

 port link-mode route

#

interface GigabitEthernet1/0/2

 port link-mode route

#

interface GigabitEthernet1/0/3

 port link-mode route

#

interface GigabitEthernet1/0/4

 port link-mode route

#

interface GigabitEthernet1/0/5

 port link-mode route

#

interface GigabitEthernet1/0/6

 port link-mode route

 description ----LAN----

 ip address 192.168.1.254 255.255.255.0

 manage http inbound

 manage https inbound

 manage ping inbound

 manage telnet inbound

#

interface GigabitEthernet1/0/7

#

security-zone name Local

#

security-zone name Trust

 import interface GigabitEthernet1/0/6

 import interface GigabitEthernet1/0/7

#

security-zone name DMZ

#

security-zone name Untrust

 import interface Dialer0

 import interface GigabitEthernet1/0/0

#

security-zone name Management

#

zone-pair security source Trust destination Untrust

#

#

 ip route-static 0.0.0.0 0 Dialer0

#

security-policy ip

 rule 0 name pass-0

  action pass

  source-zone Trust

  destination-zone Untrust

#

 cloud-management server domain secops.h3c.com

#