Check the configuration of the customer SVN3000, 'network extension' use the manual mode, configure address pool assign IP addresses and route, and after dial can ping layer 3 switch interface address under SVN300, eliminating SVN3000 router configuration problem. From SVN3000 can ping intranet server address. Check SVN3000 customers various configuration, without any limit policy. The client dialing in route is as follows:
Doubt that the layer 3 switch under the SVN3000 does not configure the route to SVN3000 dial-in address, causing the dial-in data can reach the interface between layer 3 switch and SVN3000, but can't reach the server under switch.
Configure the router to 172.16.0.2 and SVN3000 default routing in the layer 3 switch.
After configure, the test problem solved. Dial-in client can communicate to the intranet server.