M9006策略路由不生效

M9006配置策略路由与NQA联动，通过策略路由给安全平台引流，目前入方向迎流成功，出方向引流不成功。求大神给看看，谢谢。

配置如下：

m9000给深信服xsec引流配置nqa

nqa entry admin sangforxsec

type icmp-echo

destination ip 10.40.149.29

next-hop 10.40.149.29

frequency 1000

reaction 1 checked-element probe-fail threshold-type consecutive 3 action-type trigger-only

quit

nqa schedule admin sangforxsecstart-time now lifetime forever

track 5 nqa entry admin sangforxsec reaction 1

入方向配置：

acl advanced 3807

rule 10 permit icmp

rule 15 permit ip destination 188.0.200.254 0

policy-based-route Sangfor_xsec_in_ICMP_PBR permit node 10

if-match acl 3807

apply ip-address next-hop 10.40.149.29 track 5

interface Ten-GigabitEthernet1/3/0/6

ip policy-based-route SangforXsecIn

interface Ten-GigabitEthernet1/3/0/7

ip policy-based-route SangforXsecIn

出方向配置：

acl advanced 3808

rule 10 permit icmp

rule 15 permit ip source 188.0.200.254 0

policy-based-route Sangfor-xsec-out-ICMP_PBR permit node 10

if-match acl 3808

apply ip-address next-hop 10.40.149.29 track 1

interface Ten-GigabitEthernet1/4/0/1

ip policy-based-route SangforXsecOut

interface Ten-GigabitEthernet2/4/0/1

ip policy-based-route SangforXsecOut

M9006 通过TG1/4/0/2、3、4 TG2/4/0/2、3、4互联到安全平台，TG1/4/0/1 TG2/4/0/1互联到S12808，网关在12808上，互联网入流量匹配上acl3807后下一跳指向安全平台，从12808上来的流量匹配上acl 3808后下一跳指向安全平台。目前入方向流量正常引流 出方向没有流量。