防火墙在HCL配置的一样的内容上下联可以联通，到实机上就通不了了，求救

#

 version 7.1.064, Release 9590P14

#

 sysname H3C

#

 clock protocol none

#

wlan global-configuration

#

 irf mac-address persistent timer

 irf auto-update enable

 undo irf link-delay

 irf member 1 priority 1

#

 dhcp enable

 dhcp server always-broadcast

#

 dns proxy enable

 dns server 8.8.8.8

 dns server 114.114.114.114

 ip host quicknet.h3c.com 192.168.77.1

#

 lldp global enable

#              

 password-recovery enable

#              

vlan 1         

#              

dhcp server ip-pool lan1

 gateway-list 192.168.0.1

 network 192.168.0.0 mask 255.255.255.0

 address range 192.168.0.2 192.168.0.254

 dns-list 192.168.0.1

#              

controller Cellular1/0/0

#              

controller Cellular1/0/1

#              

interface NULL0

#              

interface Vlan-interface1

 description LAN-interface

 ip address dhcp-alloc

 tcp mss 1280  

 undo dhcp select server

#              

interface GigabitEthernet1/0/2

 port link-mode bridge

#              

interface GigabitEthernet1/0/3

 port link-mode bridge

#              

object-policy ip Trust-Untrust

 rule 0 pass   

#              

security-zone name Local

#              

security-zone name Trust

 import interface GigabitEthernet1/0/2 vlan 1 to 4094

#              

security-zone name DMZ

#              

security-zone name Untrust

 import interface GigabitEthernet1/0/3 vlan 1 to 4094

#              

security-zone name Management

#              

zone-pair security source Trust destination Untrust

 object-policy apply ip Trust-Untrust

#              

 scheduler logfile size 16

#              

line class aux 

 user-role network-operator

#              

line class console

 authentication-mode scheme

 user-role network-admin

#              

line class vty 

 user-role network-operator

#              

line aux 0     

 user-role network-admin

#              

line con 0     

 user-role network-admin

#              

line vty 0 63  

 authentication-mode scheme

 user-role network-admin

#              

 undo info-center logfile enable

#              

performance-management

#              

 ssh server enable

#              

 arp ip-conflict log prompt

#              

domain system  

#              

 domain default enable system

user-group system

#              

local-user admin class manage

 password hash $h$6$UbIhNnPevyKUwfpm$LqR3+yg1IjNct39MkOR0H0iQXLkYB3jMqM4vbAeoXOhbabIIFnjJPEGR00YiYA1Sz4LiY3FmEdru2fOLMb1shQ==

 service-type ssh telnet terminal http https

 authorization-attribute user-role level-3

 authorization-attribute user-role network-admin

 authorization-attribute user-role network-operator

#              

 ssl renegotiation disable

 ssl version ssl3.0 disable

 ssl version tls1.0 disable

 undo ssl version tls1.1 disable

#              

 ipsec logging negotiation enable

#              

 ike logging negotiation enable

#              

 netconf soap http enable

#              

 ip http enable

 ip https enable

#              

 loadbalance isp file flash:/lbispinfo_v1.5.tp

#              

 smartmc tc enable

#              

wlan ap-group default-group

 vlan 1        

#              

 cloud-management server domain cloudnet.h3c.com

#              

return 

上联路由 gig1/0/3 下联交换gig 1/0/2