运营商两条网线需要一主一备 主联通 备电信

防火墙 18口 联通 19口电信 光纤29口到核心 

security-zone name Trust import interface GigabitEthernet 1/0/1 

security-zone name Untrust import interface GigabitEthernet 1/0/2 

 # security-policy ip rule 0 name any action pass source-zone Local source-zone Trust source-zone DMZ source-zone Untrust source-zone Management destination-zone Local destination-zone Trust destination-zone DMZ destination-zone Untrust destination-zone Management 

# acl basic 2000 acl2000通过所有 rule 0 permit nat outbound 2000 

通过光纤到核心   一条0.0.0.0 0  到联通网关  一条 0.0.0.0 0 到电信网关 优先级80 

核心ping的通联通ip和网关 ping通电信IP ping不通网关