Router can ping and resolve hostnames, but VLANs and switch cannot

Question

I recently installed an Adtran Netvanta 4430 to perform some basic VLANs on a network with a little bit of inter-VLAN routing, and I'm having a few odd issues, probably attributed to my inexperience on routers. The setup is that on interface 0/1 I have the uplink to an ONT, and on interface 0/2 it is connected to a switch. I must be missing something in the config side of things, as here is what I can do...

• Make a trunk port as well as access ports for VLANs
• Get IPs, DNS servers, name servers, domains, from router on ports with the correctly set VLAN
• Ping 8.8.8.8 and google.com from the router

However, I cannot...

• Ping from the computer connected to switch externally, internally works fine.
• Look up DNS for name resolution
• Ping from the switch (Adtran Netvanta 1534)

So what could this be? I have this config and I have tried messing with IP routing (default-gateway as well as something else I forgot) to no avail. I have also messed with access control lists and when I try to apply them, I get an error that says Error: you must first assign an IPv4 address which may be related. The switch is a very basic setup (for each port, switchport access vlan (blah) and a single switchport mode trunk) but the router is where it gets a little confusing in my opinion, as it's my first I've ever set up I've done lots of reading and research and I hate asking for help that basically looks like "I don't understand it, fix my config for me" (which I am trying not to do)... but I'm at a big loss now and any help is appreciated greatly!

Building configuration...
!
!
! ADTRAN, Inc. OS version 18.01.03.00
! Boot ROM version 17.04.01.00
! Platform: NetVanta 4430, part number 1700630E1
! Serial number LBADTNXXXXXXXX
!
!
hostname "Router"
no enable password
!
clock timezone -8
clock no-auto-correct-DST 
!
ip subnet-zero
ip classless
ip routing
ipv6 unicast-routing
!
!
ip name-server 8.8.8.8 8.8.4.4 
!       
!
no auto-config
!
no event-history
no logging forwarding
no logging email
!
no service password-encryption
!
!
!
ip firewall
no ip firewall alg msn
no ip firewall alg mszone
no ip firewall alg h323
!
!
!
!
!
!
!       
!
!
no dot11ap access-point-control
!
!
!
!
ip dhcp-server excluded-address 10.10.3.1 10.10.3.3
ip dhcp-server excluded-address 10.10.10.1 10.10.10.15
!
ip dhcp-server pool “VLAN3”
  network 10.10.3.0 255.255.255.192
  domain-name “vlan3.com"
  dns-server 8.8.8.8 (ISP Provided DNS)
  default-router 10.10.3.1
!
ip dhcp-server pool “VLAN2”
  network 10.10.10.0 255.255.255.0
  default-router 10.10.10.1
!
ip dhcp-server pool “VLAN4”
  network 192.168.5.0 255.255.255.0
  domain-name “vlan4.com"
  dns-server 8.8.8.8 (ISP Provided DNS)
  default-router 192.168.5.1
!
ip dhcp-server pool “VLAN5”
  network 10.10.5.0 255.255.255.192
  domain-name “vlan5.com"
  dns-server 8.8.8.8 (ISP Provided DNS)
  default-router 10.10.5.1
!
ip dhcp-server pool “VLAN6”
  network 10.10.6.0 255.255.255.0
  domain-name “vlan6.com”
  dns-server 8.8.8.8 (ISP Provided DNS)
  default-router 10.10.6.1
!
ip dhcp-server pool "Canon 1”
  default-router 192.168.5.1
  host 192.168.5.234 255.255.255.0
  hardware-address
f4:a9:97:xx:xx:xx ethernet
!
ip dhcp-server pool “printer2”
  default-router 192.168.5.1
  host 192.168.5.201 255.255.255.0
  hardware-address 84:ba:3b:xx:xx:xx ethernet
!
ip dhcp-server pool "C5550"
!
!
!
!
!
!
!
no ethernet cfm
!
interface eth 0/1
  no ip address
  shutdown
!
!
!
interface gigabit-eth 0/1
  ip address  (EXTERNAL IP) 255.255.255.252 
  no shutdown
!
!       
interface gigabit-eth 0/2
  encapsulation 802.1q
  no shutdown
!
interface gigabit-eth 0/2.2
  description BLAH
  vlan-id 2
  ip address  10.10.10.1  255.255.255.0 
  no shutdown
interface gigabit-eth 0/2.3
  description BLAH
  vlan-id 3
  ip address  10.10.3.1  255.255.255.192 
  no shutdown
interface gigabit-eth 0/2.4
  description BLAH
  vlan-id 4
  ip address  192.168.5.1  255.255.255.0 
  no shutdown
interface gigabit-eth 0/2.5
  description BLAH
  vlan-id 5
  ip address  10.10.5.1  255.255.255.192 
  no shutdown
interface gigabit-eth 0/2.6
  description BLAH
  vlan-id 6
  ip address  10.10.6.1  255.255.255.0 
  no shutdown
!
!
!
!
!
!
!
!
!
ip access-list extended PermitAny
  permit ip any  any    
!
ip access-list extended printers
  permit ip 10.10.3.0 0.0.0.192  host 192.168.5.0    
  permit ip 10.10.2.0 0.0.0.255  192.168.5.0 0.0.0.255    
  permit ip 10.10.6.0 0.0.0.255  192.168.5.0 0.0.0.255    
  permit ip 10.10.3.0 0.0.0.192  192.168.5.0 0.0.0.255    
!
!
!
!
ip policy-class print
  allow list printers
  nat source list PermitAny interface gigabit-ethernet 0/1 overload
!
!
!
ip route 0.0.0.0 0.0.0.0 (GATEWAY OF ONT)
!
no tftp server
no tftp server overwrite
no ip http server
no ip http secure-server
no ip snmp agent
no ip ftp server
ip ftp server default-filesystem flash
no ip scp server
no ip sntp server
!
!       
!
!
!
!
!
!
ip sip udp 5060
ip sip tcp 5060
!
!
!
!
!
!
!
!
!
!
!
!
!
!
line con 0
  no login
!
line telnet 0 4
  login
  no shutdown
line ssh 0 4
  login local-userlist
  no shutdown
!
!
!
!
!
end```

Answer 1

You did not configure NAT for your Private-to-Public addressing, so your packets will be dropped on the public Internet. The ISPs have agreed not to route packets with Private addressing.

---

Unfortunately, I'm not completely sure how to do that on your Adtran device. The syntax appears similar to Cisco IOS, but there are a few differences, so I do not know if the Cisco syntax for NAT configuration will actually work on your device.