SecPath F1000-AI-35

内网终端使用外网地址访问内网服务器，以下是部署方法，请参考：
1、在内网口开启NAT回流，以下是参考命令：
int gi 1/0/1
nat hairpin enable
quit
2、如果不使用NAT回流，可考虑使用双向NAT来实现。

3、防火墙注意放通双向的安全策略或域间策略。

interface GigabitEthernet1/0/2
port link-mode route
nat hairpin enable
manage http inbound
manage http outbound
manage https inbound
manage https outbound
manage netconf-http inbound
manage netconf-https inbound
manage netconf-ssh inbound
manage ping inbound
manage ping outbound
manage snmp inbound
manage ssh inbound
manage ssh outbound
manage telnet inbound
manage telnet outbound
port link-aggregation group 1
#
return
[F1000]dis cur inter gi 1/0/3
#
interface GigabitEthernet1/0/3
port link-mode route
nat hairpin enable
manage http inbound
manage http outbound
manage https inbound
manage https outbound
manage netconf-http inbound
manage netconf-https inbound
manage netconf-ssh inbound
manage ping inbound
manage ping outbound
manage snmp inbound
manage ssh inbound
manage ssh outbound
manage telnet inbound
manage telnet outbound
port link-aggregation group 1

双向策略如何配置？