防火墙设置了端口IP，别说和其它设备互通了，ping自己都不通咋回事

sysname 生产防火墙
#
context Admin id 1
#
telnet server enable
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
#
xbar load-single
password-recovery enable
lpu-type f-series
#
vlan 1
#
interface Route-Aggregation1
description TO 生产核心交换机
ip address 10.100.99.130 255.255.255.252
#
interface NULL0
#
interface GigabitEthernet1/0/0
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/1
port link-mode route
combo enable copper
ip address 192.168.0.1 255.255.255.0
#
interface GigabitEthernet1/0/2
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/3
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/4
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/5
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/6
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/7
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/8
port link-mode route
combo enable copper
port link-aggregation group 1
#
interface GigabitEthernet1/0/9
port link-mode route
combo enable copper
port link-aggregation group 1
#
interface GigabitEthernet1/0/10
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/11
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/12
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/13
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/14
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/15
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/16
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/17
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/18
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/19
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/20
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/21
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/22
port link-mode route
combo enable copper
#
interface GigabitEthernet1/0/23
port link-mode route
combo enable copper
#
security-zone name Local
#
security-zone name Trust
import interface GigabitEthernet1/0/8
import interface GigabitEthernet1/0/9
import interface Route-Aggregation1
#
security-zone name DMZ
#
security-zone name Untrust
import interface GigabitEthernet1/0/3
#
security-zone name Management
#
scheduler logfile size 16
#
line class aux
user-role network-operator
#
line class console
user-role network-admin
#
line class tty
user-role network-operator
#
line class vty
user-role network-operator
#
line aux 0
user-role network-admin
#
line con 0
authentication-mode scheme
user-role network-admin
#
line vty 0 4
authentication-mode scheme
user-role network-admin
#
line vty 5 63
user-role network-operator
#
ip route-static 10.100.99.0 24 10.100.99.129
ip route-static 192.168.10.0 24 10.100.99.129
ip route-static 192.168.20.0 24 10.100.99.129
#
info-center loghost 127.0.0.1 port 3301 format default
info-center source CFGLOG loghost level informational
#
domain system
#
aaa session-limit ftp 16
aaa session-limit telnet 16
aaa session-limit ssh 16
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
local-user admin class manage
password hash $h$6$yj+neGHN14/96zS4$yf3MXS/sfczX+/Sd1aPEempivEl08VIuhOwn2i4M+82vaaL5sGSzv7u5eqFs3RACgku7CZ6vD6XJduCg0mU4tA==
service-type telnet terminal http
authorization-attribute user-role level-3
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator
#
ip http enable
ip https enable
#
security-policy ip
rule 10 name local_to_trust
action pass
source-zone local
destination-zone trust
rule 20 name local_to_untrust
action pass
source-zone local
destination-zone untrust
rule 30 name trust_to_local
action pass
source-zone trust
destination-zone local
rule 40 name trust_to_trust
action pass
source-zone trust
destination-zone trust
rule 50 name trust_to_untrust
action pass
source-zone trust
destination-zone untrust
#
return

ping自己不通？接口up了没？

您好，请知：

防火墙接口无法PING通，以下是排查要点，请参考：

1、检查接口是否UP，参考命令为dis ip int brief

2、检查接口是否已加入安全域并放通安全策略或域间策略。

3、检查接口是否绑定了VPN实例，如果是，则需要带VPN去PING。

4、检查接口出来的网线是否有问题。