防火墙 F100-M-G-AC 故障隔几天就断网，设备重启后正常。

防火墙已用3年左右，以前没有出现过此类问提，近期没有调整过防火墙配置，目前出现问题，隔几天网络断网，经过排查，发现内网用户无法访问到上级网络，ping本地网关无法PING通，确认为防火墙到路由器无法通信，重启防火墙后，网络恢复正常。

组网方式：局域网各终端链接防火墙，防火墙连接路由器。

防火墙配置如下：<!-- XML CONFIGURATION FILE --> <sslvpn> <diyview> <title-diy-table> <row><index-title>SSL VPN</index-title><welcome-title>Welcome to SSL VPN</welcome-title><service-title>SSL VPN</service-title></row> </title-diy-table> <pic-save-table> <row><service-logo>/svpn/images/h3c.gif</service-logo><service-bg>/svpn/images/top_right_01.jpg</service-bg><index-logo>/svpn/images/h3c.gif</index-logo></row> </pic-save-table> <all-diy-table> <row><enable>0</enable></row> </all-diy-table> </diyview> <resview> <res-ipac-global-table> <row><keepalive>10</keepalive><clireach>0</clireach><onlyvpn>0</onlyvpn><sevdis>0</sevdis></row> </res-ipac-global-table> <res-group-table> <row><id>33890</id><name>autohome</name></row> <row><id>17507</id><name>autostart</name></row> </res-group-table> </resview> <userview> <user-group-table> <row><id>17408</id><name>Guests</name></row> </user-group-table> <user-table> <row><id>2162688</id><name>guest</name><description>Default guest user</description><password-md5>3C943016CF71D795F741F76EED5B63AF</password-md5><public>0</public><public-limit>0</public-limit><status>0</status><period>0-0-0</period><studymac>0</studymac></row> </user-table> </userview> <domainview> <domain-policy-table> <row><enable-sec-policy>0</enable-sec-policy><enable-verify>0</enable-verify><enable-only-client>0</enable-only-client><enable-bind-mac>0</enable-bind-mac><enable-auto-login>0</enable-auto-login><user-out-time>30</user-out-time><dft-auth-method>1</dft-auth-method><cert-sect>0</cert-sect><verify-out-time>120</verify-out-time></row> </domain-policy-table> <cache-policy-table> <row><clear-cache>1</clear-cache><clear-COOKIE>1</clear-COOKIE><clear-client>0</clear-client><clear-config>1</clear-config></row> </cache-policy-table> <dom-loc-auth-table> <row><cerpol>0</cerpol></row> </dom-loc-auth-table> <dom-radius-auth-table> <row><ifstartauth>0</ifstartauth><cerpol>0</cerpol><ifstartcharge>0</ifstartcharge><ifupvirtualaddr>0</ifupvirtualaddr></row> </dom-radius-auth-table> <dom-ldap-auth-table> <row><servport>389</servport><version>3</version><cerpol>0</cerpol><ifstartauth>0</ifstartauth><checkmethod>TEMPLATE</checkmethod></row> </dom-ldap-auth-table> <dom-ad-auth-table> <row><cerpol>0</cerpol><ifstartauth>0</ifstartauth><serverectime>5</serverectime><usrnamestyle>0</usrnamestyle></row> </dom-ad-auth-table> <dom-comb-auth-table> <row><ifstartcombauth>0</ifstartcombauth><cerpol>0</cerpol><ifinputpaswrdagain>0</ifinputpaswrdagain><cerpol_a>0</cerpol_a></row> </dom-comb-auth-table> </domainview> <servermng> <server-mng-table> <row><enable>0</enable><port>443</port></row> </server-mng-table> </servermng> </sslvpn> <nat> <nat> <respond-table> <row><respond-get>0</respond-get></row> </respond-table> </nat> </nat> <flowdetect> <flowdetect> <flowdetect-table> <row><mode>0</mode></row> </flowdetect-table> </flowdetect> </flowdetect> <atkdef> <singlepacket> <singlepacket-table> <row><zoneid>65536</zoneid><autodroppacket>1</autodroppacket><fraggle>1</fraggle><land>1</land><winnuke>1</winnuke><tcpflag>1</tcpflag><icmpunreachable>1</icmpunreachable><icmpredirect>1</icmpredirect><tracert>1</tracert><smurf>1</smurf><sourceroute>1</sourceroute><routerecord>1</routerecord><largeicmp>1</largeicmp><maxpacketlen>4000</maxpacketlen></row> </singlepacket-table> </singlepacket> <synflood> <synflood-option-table> <row><zoneid>65536</zoneid><autodroppacket>1</autodroppacket><sendresetpacket>0</sendresetpacket><addprotectip>0</addprotectip></row> </synflood-option-table> </synflood> <udpflood> <udpflood-option-table> <row><zoneid>65536</zoneid><autodroppacket>1</autodroppacket></row> </udpflood-option-table> </udpflood> <icmpflood> <icmpflood-option-table> <row><zoneid>65536</zoneid><autodroppacket>1</autodroppacket></row> </icmpflood-option-table> </icmpflood> <scan> <scan-table> <row><zoneid>65536</zoneid><scan-enable>1</scan-enable><scan-threshold>4000</scan-threshold><autoaddtoblacklist>1</autoaddtoblacklist><blacklist-lasttime>30</blacklist-lasttime></row> <row><zoneid>65538</zoneid><scan-enable>1</scan-enable><scan-threshold>4000</scan-threshold><autoaddtoblacklist>1</autoaddtoblacklist><blacklist-lasttime>10</blacklist-lasttime></row> </scan-table> </scan> </atkdef> <dhbk> <dhbk> <dhbk-table> <row><function>0</function><type>1</type><status>1</status></row> </dhbk-table> </dhbk> </dhbk> <hosttraffic> <hosttraffic> <basicconfig-table> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>1</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>2</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>3</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>4</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>5</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>6</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>7</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>8</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>9</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>10</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>11</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>12</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>13</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>14</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>15</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>16</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>17</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>18</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>19</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>20</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>21</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>22</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>23</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>24</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>25</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>26</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>27</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>28</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>29</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>30</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>31</virdevid></row> <row><enable>0</enable><inletime>60</inletime><interval>5</interval><virdevid>32</virdevid></row> </basicconfig-table> </hosttraffic> </hosttraffic> <sessionlog> <sessionlog> <switch-table> <row><createlog>0</createlog><deletelog>1</deletelog><activelog>0</activelog></row> </switch-table> </sessionlog> </sessionlog> <loadbalance> <lbvdview> <lbvdinfo-table> <row><lbvdid>1</lbvdid><vdmaxvsnum>1024</vdmaxvsnum><vdmaxrsnum>16384</vdmaxrsnum><vdmaxrgnum>1024</vdmaxrgnum></row> </lbvdinfo-table> </lbvdview> <hcview> <hc-table> <row><type>ARP</type><virdevid>1</virdevid><name>arp</name><frequency>5</frequency><timeout>3</timeout><retrytimes>3</retrytimes><hostip>0.0.0.0</hostip><snmpversion>0</snmpversion><sipprotocol>0</sipprotocol><nasip>0.0.0.0</nasip><sysdefine>0</sysdefine><destip>0.0.0.0</destip><destport>0</destport><sipport>0</sipport></row> <row><type>DNS</type><virdevid>1</virdevid><name>dns</name><frequency>5</frequency><timeout>3</timeout><retrytimes>3</retrytimes><hostname>***.***</hostname><hostip>0.0.0.0</hostip><snmpversion>0</snmpversion><sipprotocol>0</sipprotocol><nasip>0.0.0.0</nasip><sysdefine>0</sysdefine><destip>0.0.0.0</destip><destport>0</destport><sipport>0</sipport></row> <row><type>FTP</type><virdevid>1</virdevid><name>ftp</name><frequency>5</frequency><timeout>3</timeout><retrytimes>3</retrytimes><username>admin</username><passwd>$c$3$8b9ZRkOmo4lKkmkV4mtjpS3YELyCyw==</passwd><filename>a.b</filename><hostip>0.0.0.0</hostip><snmpversion>0</snmpversion><sipprotocol>0</sipprotocol><nasip>0.0.0.0</nasip><sysdefine>0</sysdefine><destip>0.0.0.0</destip><destport>0</destport><sipport>0</sipport><bchiperpawd>1</bchiperpawd></row> <row><type>HTTP</type><virdevid>1</virdevid><name>http</name><frequency>5</frequency><timeout>3</timeout><retrytimes>3</retrytimes><url>/index.htm</url><hostip>0.0.0.0</hostip><snmpversion>0</snmpversion><sipprotocol>0</sipprotocol><nasip>0.0.0.0</nasip><sysdefine>0</sysdefine><destip>0.0.0.0</destip><destport>0</destport><sipport>0</sipport></row> <row><type>ICMP</type><virdevid>1</virdevid><name>icmp</name><frequency>5</frequency><timeout>3</timeout><retrytimes>3</retrytimes><hostip>0.0.0.0</hostip><snmpversion>0</snmpversion><sipprotocol>0</sipprotocol><nasip>0.0.0.0</nasip><sysdefine>0</sysdefine><destip>0.0.0.0</destip><destport>0</destport><sipport>0</sipport></row> <row><type>P-DNS</type><virdevid>1</virdevid><name>proxim_dns</name><frequency>120</frequency><timeout>3</timeout><retrytimes>1</retrytimes><hostname>***.***</hostname><hostip>0.0.0.0</hostip><snmpversion>0</snmpversion><sipprotocol>0</sipprotocol><nasip>0.0.0.0</nasip><sysdefine>0</sysdefine><destip>0.0.0.0</destip><destport>0</destport><sipport>0</sipport></row> <row><type>P-ICMP</type><virdevid>1</virdevid><name>proxim_icmp</name><frequency>120</frequency><timeout>3</timeout><retrytimes>1</retrytimes><hostip>0.0.0.0</hostip><snmpversion>0</snmpversion><sipprotocol>0</sipprotocol><nasip>0.0.0.0</nasip><sysdefine>0</sysdefine><destip>0.0.0.0</destip><destport>0</destport><sipport>0</sipport></row> <row><type>P-TCP Half Open</type><virdevid>1</virdevid><name>proxim_tcp_half_open</name><frequency>120</frequency><timeout>3</timeout><retrytimes>1</retrytimes><hostip>0.0.0.0</hostip><snmpversion>0</snmpversion><sipprotocol>0</sipprotocol><nasip>0.0.0.0</nasip><sysdefine>0</sysdefine><destip>0.0.0.0</destip><destport>0</destport><sipport>0</sipport></row> <row><type>RTSP</type><virdevid>1</virdevid><name>rtsp</name><frequency>5</frequency><timeout>3</timeout><retrytimes>3</retrytimes><hostip>0.0.0.0</hostip><snmpversion>0</snmpversion><sipprotocol>0</sipprotocol><nasip>0.0.0.0</nasip><sysdefine>0</sysdefine><destip>0.0.0.0</destip><destport>0</destport><sipport>0</sipport></row> <row><type>SIP</type><virdevid>1</virdevid><name>sip</name><frequency>5</frequency><timeout>3</timeout><retrytimes>3</retrytimes><hostip>0.0.0.0</hostip><snmpversion>0</snmpversion><sipprotocol>0</sipprotocol><nasip>0.0.0.0</nasip><sysdefine>0</sysdefine><destip>0.0.0.0</destip><destport>0</destport><sipport>5060</sipport></row> <row><type>SNMP</type><virdevid>1</virdevid><name>snmp</name><frequency>5</frequency><timeout>3</timeout><retrytimes>3</retrytimes><hostip>0.0.0.0</hostip><snmpversion>0</snmpversion><sipprotocol>0</sipprotocol><nasip>0.0.0.0</nasip><sysdefine>0</sysdefine><destip>0.0.0.0</destip><destport>0</destport><sipport>0</sipport></row> <row><type>TCP</type><virdevid>1</virdevid><name>tcp</name><frequency>5</frequency><timeout>3</timeout><retrytimes>3</retrytimes><hostip>0.0.0.0</hostip><snmpversion>0</snmpversion><sipprotocol>0</sipprotocol><nasip>0.0.0.0</nasip><sysdefine>0</sysdefine><destip>0.0.0.0</destip><destport>0</destport><sipport>0</sipport></row> <row><type>TCP Half Open</type><virdevid>1</virdevid><name>tcp_half_open</name><frequency>5</frequency><timeout>3</timeout><retrytimes>3</retrytimes><hostip>0.0.0.0</hostip><snmpversion>0</snmpversion><sipprotocol>0</sipprotocol><nasip>0.0.0.0</nasip><sysdefine>0</sysdefine><destip>0.0.0.0</destip><destport>0</destport><sipport>0</sipport></row> <row><type>UDPNORMAL</type><virdevid>1</virdevid><name>udpnormal</name><frequency>5</frequency><timeout>3</timeout><retrytimes>3</retrytimes><hostip>0.0.0.0</hostip><snmpversion>0</snmpversion><sipprotocol>0</sipprotocol><nasip>0.0.0.0</nasip><sysdefine>0</sysdefine><destip>0.0.0.0</destip><destport>0</destport><sipport>0</sipport></row> </hc-table> </hcview> <proximitydetectview> <proximitydetect-table> <row><masklen>24</masklen><agedtime>60</agedtime><netdelayw>100</netdelayw><rthopw>100</rthopw><outbandwidthw>100</outbandwidthw><linkcostw>100</linkcostw><inbandwidthw>0</inbandwidthw><detectname>proxim_icmp</detectname><Indetectname>proxim_icmp</Indetectname></row> </proximitydetect-table> </proximitydetectview> <inboundview> <inbound-table> <row><endns>0</endns><agedtime>60</agedtime><enisprouting>0</enisprouting></row> </inbound-table> </inboundview> <globalview> <globalset-table> <row><enable>0</enable></row> </globalset-table> </globalview> <glbproximityparaview> <glbproximitypara-table> <row><name>default_dns</name><mask>24</mask><agedtime>1800</agedtime><rtt>100</rtt><ttl>100</ttl><load>100</load><timeout>3</timeout><hostname>***.***</hostname><proximmethod>DNS</proximmethod><proximrestore>1</proximrestore></row> <row><name>default_icmp</name><mask>24</mask><agedtime>1800</agedtime><rtt>100</rtt><ttl>100</ttl><load>100</load><timeout>3</timeout><hostname>***.***</hostname><proximmethod>ICMP</proximmethod><proximrestore>1</proximrestore></row> <row><name>default_tcp_half_open</name><mask>24</mask><agedtime>1800</agedtime><rtt>100</rtt><ttl>100</ttl><load>100</load><timeout>3</timeout><hostname>***.***</hostname><proximmethod>TCP Half Open</proximmethod><proximrestore>1</proximrestore></row> </glbproximitypara-table> </glbproximityparaview> <glbprotocolview> <glbprotocol-table> <row><port>3936</port><authority>2</authority><authoritykey>$c$3$XdNHMDrwbhgwnyg97+fSRUvKyBYWlA==</authoritykey><frequency>5</frequency><timeout>3</timeout><retrytime>5</retrytime><bauthkeychiper>1</bauthkeychiper></row> </glbprotocol-table> </glbprotocolview> </loadbalance> <waninter> <macaddress> <macclone-table> <row><ifindex>67108864</ifindex><configure>0</configure></row> <row><ifindex>67305472</ifindex><configure>0</configure></row> <row><ifindex>67371008</ifindex><configure>0</configure></row> <row><ifindex>67436544</ifindex><configure>0</configure></row> <row><ifindex>243269632</ifindex><configure>0</configure></row> </macclone-table> </macaddress> </waninter> <dpi> <dpi> <java-global-table> <row><keywords>.CLASS</keywords><type>1</type><vdmid>1</vdmid></row> <row><keywords>.JAR</keywords><type>1</type><vdmid>1</vdmid></row> </java-global-table> <activex-global-table> <row><keywords>.OCX</keywords><type>1</type><vdmid>1</vdmid></row> </activex-global-table> </dpi> </dpi> <idscollab> <idscollab> <idscollab-table> <row><enabls>0</enabls></row> </idscollab-table> </idscollab> </idscollab>