汇聚旁挂防火墙，如果防火墙挂了，怎么做逃生通道？

Ten-GigabitEthernet1/2/0/13和Ten-GigabitEthernet1/2/0/15是自环口

[H3C]dis version

H3C Comware Software, Version 7.1.070, Release 7536P08

关键配置：

接口配置：

#

interface Ten-GigabitEthernet1/2/0/13

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 200

# undo mac-address static source-check enable自环口去使能静态MAC地址表项匹配检查功能：                                                    

#

interface Ten-GigabitEthernet1/2/0/15

 port link-mode route

 undo mac-address static source-check enable自环口去使能静态MAC地址表项匹配检查功能：                                            

#

interface Vlan-interface200

 ip binding vpn-instance vpna

 ip address 200.1.1.1 255.255.255.0

#

interface Ten-GigabitEthernet1/2/0/15.200

 ip binding vpn-instance vpnb

 ip address 200.1.1.2 255.255.255.0

#

业务：

interface loopback0

 ip binding vpn-instance vpna

 ip address 100.1.1.1 255.255.255.0

#

interface loopback1

 ip binding vpn-instance vpnb

 ip address 100.1.2.1 255.255.255.0

#

静态路由：

[test-1]dis cu | in route-static                                               

 ip route-static vpn-instance vpna 100.1.2.0 24 200.1.1.2                      

 ip route-static vpn-instance vpnb 100.1.1.0 24 200.1.1.1

（1）直连ping测试

[10500-2.53]ping -vpn-instance vpna -a 200.1.1.1 200.1.1.2

Ping 200.1.1.2 (200.1.1.2) from 200.1.1.1: 56 data bytes, press CTRL_C to break

56 bytes from 200.1.1.2: icmp_seq=0 ttl=255 time=1.939 ms

56 bytes from 200.1.1.2: icmp_seq=1 ttl=255 time=7.272 ms

56 bytes from 200.1.1.2: icmp_seq=2 ttl=255 time=1.731 ms

56 bytes from 200.1.1.2: icmp_seq=3 ttl=255 time=1.778 ms

56 bytes from 200.1.1.2: icmp_seq=4 ttl=255 time=1.538 ms

--- Ping statistics for 200.1.1.2 in VPN instance vpna ---

5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss

round-trip min/avg/max/std-dev = 1.538/2.852/7.272/2.214 ms

（2）业务ping测试

[10500-2.53]ping -vpn-instance vpna -a 100.1.1.1 100.1.2.1

Ping 100.1.2.1 (100.1.2.1) from 100.1.1.1: 56 data bytes, press CTRL_C to break

56 bytes from 100.1.2.1: icmp_seq=0 ttl=255 time=0.297 ms

56 bytes from 100.1.2.1: icmp_seq=1 ttl=255 time=0.235 ms

56 bytes from 100.1.2.1: icmp_seq=2 ttl=255 time=0.215 ms

56 bytes from 100.1.2.1: icmp_seq=3 ttl=255 time=0.230 ms

56 bytes from 100.1.2.1: icmp_seq=4 ttl=255 time=0.275 ms

--- Ping statistics for 100.1.2.1 in VPN instance vpna ---

5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss

round-trip min/avg/max/std-dev = 0.215/0.250/0.297/0.031 ms

round-trip min/avg/max/std-dev = 0.195/0.246/0.297/0.036 ms