RBM＋VRRP＋NAT组网，VRRP虚地址ping不通网关，NAT不能转换

如图，某局点出口组网：设备型号：F1000-AI-25   软件版本:Version 7.1.064, Release 8860P28

RBM＋VRRP＋NAT组网，联动VRRP主备切换正常，联通和移动的VRRP虚地址ping不通公网网关，NAT不能转换。

 nat outbound接口地址可以转换，，，

FW1

nat address-group 1   移动

 address X.200.76.212  X.X.76.212

 vrrp vrid 112 

 #

nat address-group 2  联通

 address X.56.36.196 X.X.36.196 

 vrrp vrid 113

 # 

interface GigabitEthernet1/0/12

 port link-mode route description YiDong-internet

 ip address X.200.76.210 255.255.255.0

 vrrp vrid 112 virtual-ip X.200.76.212 active 

 nat outbound 3000 address-group 1 

# 

interface GigabitEthernet1/0/13 

 port link-mode route 

 description LianTong-internet 

 ip address X.56.36.194 255.255.255.224

vrrp vrid 113 virtual-ip X.56.36.196 active

 nat outbound 3000 address-group 2

 #

acl advanced 3000 description NAT-OUT

 rule 1000 permit ip 

# 

 ip route-static 0.0.0.0 0 X.56.36.193 

 ip route-static 0.0.0.0 0 X.200.76.1 preference 50

#

security-zone name Untrust 

import interface GigabitEthernet1/0/12

 import interface GigabitEthernet1/0/13

 #

security-policy ip

rule 1 name any 

 action pass 

#

# interface GigabitEthernet1/0/14 

 port link-mode route description RBM 

 port link-aggregation group 64 

#

 interface GigabitEthernet1/0/15 

 port link-mode route description RBM

 port link-aggregation group 64

 # 

remote-backup group 

 data-channel interface Route-Aggregation64 

 configuration sync-check interval 12

delay-time 1 

 local-ip 1.1.1.1 

 remote-ip 1.1.1.2 

 device-role primary 

# 

FW2

nat address-group 1   移动

 address X.200.76.212  X.X.76.212

 vrrp vrid 112 

 #

nat address-group 2  联通

 address X.56.36.196 X.X.36.196 

 vrrp vrid 113

 # 

interface GigabitEthernet1/0/12

 port link-mode route description YiDong-internet

 ip address X.200.76.211 255.255.255.0

 vrrp vrid 112 virtual-ip X.200.76.212 active 

 nat outbound 3000 address-group 1 

# 

interface GigabitEthernet1/0/13 

 port link-mode route 

 description LianTong-internet 

 ip address X.56.36.195 255.255.255.224

vrrp vrid 113 virtual-ip X.56.36.196 active

 nat outbound 3000 address-group 2

 #

acl advanced 3000 description NAT-OUT

 rule 1000 permit ip 

# 

 ip route-static 0.0.0.0 0 X.56.36.193 

 ip route-static 0.0.0.0 0 X.200.76.1 preference 50

#

security-zone name Untrust 

import interface GigabitEthernet1/0/12

 import interface GigabitEthernet1/0/13

 #

security-policy ip

rule 1 name any 

 action pass 

#

# interface GigabitEthernet1/0/14 

 port link-mode route description RBM 

 port link-aggregation group 64 

#

 interface GigabitEthernet1/0/15 

 port link-mode route description RBM

 port link-aggregation group 64

 # 

remote-backup group 

 data-channel interface Route-Aggregation64 

 configuration sync-check interval 12

delay-time 1 

 local-ip 1.1.1.2

 remote-ip 1.1.1.1

 device-role se

#