H3C F1000-C-G防火墙与三层交换机连接 不通

[H3C]dis cu

#

version 5.20, Release 3733

#

sysname H3C

#

undo voice vlan mac-address 00e0-bb00-0000

#

domain default enable system

#

undo alg dns

undo alg rtsp

undo alg h323

undo alg sip

undo alg sqlnet

undo alg pptp

undo alg ils

undo alg nbt

undo alg msn

undo alg qq

undo alg tftp

undo alg sccp

undo alg gtp

#

session synchronization enable

#

password-recovery enable

#

acl number 2001

rule 0 permit source 192.168.0.0 0.0.255.255

#

vlan 1

#

domain system

access-limit disable

state active

idle-cut disable

self-service-url disable

#

pki domain default

 crl check disable

#

user-group system

group-attribute allow-guest

#

local-user admin

password cipher $c$3$2Ko3oPVrZaI8l6Cty3405PBdUt2daTtE

authorization-attribute level 3

service-type telnet

service-type web

#

interface NULL0

#

interface GigabitEthernet0/0

port link-mode route

ip address 192.168.0.1 255.255.255.0

#

interface GigabitEthernet0/1

port link-mode route

nat outbound 2001

ip address 192.168.1.2 255.255.255.0

#

interface GigabitEthernet0/2

port link-mode route

ip address 192.168.100.1 255.255.255.0

#

interface GigabitEthernet0/3

port link-mode route

#

interface GigabitEthernet0/4

port link-mode route

#

interface GigabitEthernet0/5

port link-mode route

#

interface GigabitEthernet0/6

port link-mode route

#

interface GigabitEthernet0/7

port link-mode route

#

interface GigabitEthernet0/8

port link-mode route

#

interface GigabitEthernet0/9

port link-mode route

#

interface GigabitEthernet0/10

port link-mode route

#

interface GigabitEthernet0/11

port link-mode route

#

vd Root id 1

#

zone name Management id 0

priority 100

import interface GigabitEthernet0/0

zone name Local id 1

priority 100

zone name Trust id 2

priority 85

zone name DMZ id 3

priority 50

zone name Untrust id 4

priority 5

switchto vd Root

zone name Management id 0

ip virtual-reassembly

zone name Local id 1

ip virtual-reassembly

zone name Trust id 2

ip virtual-reassembly

zone name DMZ id 3

ip virtual-reassembly

zone name Untrust id 4

ip virtual-reassembly

#

ip route-static 0.0.0.0 0.0.0.0 192.168.1.1

ip route-static 192.168.0.0 255.255.0.0 192.168.100.2

#

load xml-configuration

#

load tr069-configuration

#

user-interface con 0

user-interface vty 0 4

authentication-mode scheme

#

return

[H3C]