s7506E交换机配置策略路由请问你题

在核心做了策略引流到防火墙之后，内网的网段互访，只能通过防火墙进行访问。我在流行为那做了一个策略。感觉好像不生效？

 一、内部流量引流到防火墙 

1.配置流分类 

acl number 3000 rule 0 permit ip source 20.76.192.0 0.0.63.255 

rule 5 permit ip source 10.26.233.0 0.0.0.255 

rule 10 permit ip source 10.26.232.0 0.0.0.255 

rule 11 permit ip source 10.26.234.0 0.0.0.255 

rule 12 permit ip source 10.26.235.0 0.0.0.255

 rule 13 permit ip source 20.78.180.0 0.0.0.255

 traffic classifier c1 if-match acl 3000 

2.配置流行为 traffic behavior b1 redirect next-hop 172.16.1.1 track 2 

3.刚才设置的应用至QOS策略中，定义policy p1 qos policy p1 

classifier c1 behavior b1

 4.在下行接口上应用定义的QOS策略policy p1(除gi3/0/24,gi5/0/48,xgi3/0/27-28) 

interface gi3/0/0 

qos apply policy p1 inbound 

二、外部流量引流到防火墙 

1.配置流分类

 acl number 3100 rule 0 permit ip destination 20.76.192.0 0.0.63.255 

rule 5 permit ip destination 10.26.133.0 0.0.0.255 

rule 10 permit ip destination 10.26.232.0 0.0.0.255 

rule 11 permit ip destination10.26.234.0 0.0.0.255 

rule 12 permit ip destination 10.26.235.0 0.0.0.255

 rule 13 permit ip destination 20.78.180.0 0.0.0.255 

traffic classifier c2 

if-match acl 3100

 2.配置流行为 traffic behavior b2 redirect next-hop 172.16.2.1 track 3 

3.刚才设置的应用至QOS策略中，定义policy p2 

qos policy p2 

classifier c2 behavior b2

 4.在上行接口上应用定义的QOS策略policy p2

 interface gi3/0/24 

qos apply policy p2 inbound

 interface gi5/0/48

 qos apply policy p2 inbound 

三、配置内部网段访问的ACL 

1.acl number 3200 rule 5 permit ip source 20.76.192.0 0.0.63.255 destination 20.76.192.0 0.0.63.255

 rule 10 permit ip source 20.76.192.0 0.0.63.255 destination 20.78.180.0 0.0.0.255 

rule 11 permit ip source 20.78.180.0 0.0.0.255 destination 20.76.192.0 0.0.63.255

 rule 12 permit ip source 20.76.192.0 0.0.63.255 destination 10.26.232.0 0.0.3.255 

rule 13 permit ip source 10.26.232.0 0.0.3.255 destination 20.76.192.0 0.0.63.255 

traffic classifier c3 

if-match acl 3200 

2.配置流行为 traffic behavior b3 

3.刚才设置的应用至QOS策略中，定义policy p1 qos policy 

p1 classifier c3 behavior b3 

classifier c1 behavior b1

问题是：内网的2个不同网段或者同网段的ip，tracert 发现流量进了防火墙（172.16.1.1/172.16.2.1是防火墙和核心的互联ip）