NS-SecPATH F1020 网关可以当普通交换机使用吗？

可以的，将接口修改为2层 在划入安全域  放通域间策略即可

透明模式请参考：

   透明模式您可以参考如下配置方法：

A内网设备-------G1/0/1 防火墙 G1/0/2 ------B外网设备

[H3C]int g1/0/1 //连接内网口

[H3C-GigabitEthernet1/0/1]port link-mode bridge

[H3C-GigabitEthernet1/0/1]quit

[H3C]int g1/0/2 //连接外网口

[H3C-GigabitEthernet1/0/2]port link-mode bridge

[H3C-GigabitEthernet1/0/2]quit

[H3C]security-zone name Trust //接口加入到安全区域

[H3C-security-zone-Trust]import interface g1/0/1 vlan 1 to 4094

[H3C-security-zone-Trust]quit

[H3C]security-zone name unTrust

[H3C-security-zone-Untrust]import interface g1/0/2 vlan 1 t 4094

[H3C-security-zone-Untrust]quit

[H3C]acl a 3000 //定义acl

[H3C-acl-ipv4-adv-3000]ru per ip

[H3C-acl-ipv4-adv-3000]quit

[H3C]zone-pair security source any destination any //域间策略放通流量

[H3C-zone-pair-security-Any-Any]packet-filter 3000

[H3C-zone-pair-security-Any-Any]quit

[H3C]sa

The current configuration will be written to the device. Are you sure? [Y/N]: Y