华三UTM200-M防火墙 开启路由功能 需要内网的两个网段能够互通

华三UTM200-M防火墙  开启路由功能   需要内网的两个网段能够互通  192.168.1.X与192.168.2.X网段能够互相访问，1网段是业务网段，2网段是监控网段 需要能够相互访问。
环境描述：现场为学校，200-M上联学校网络中心，给我这边分配了一个172.28.0.10，作为我外网出口IP。

现有配置如下：

[H3C]dis cur 

#

 version 5.20, Release 5116P02

#

 sysname H3C

#

 undo voice vlan mac-address 00e0-bb00-0000

#

 domain default enable system

#

 telnet server enable

#

acl number 2001

 rule 1 permit

acl number 2002

 rule 2 permit

#

vlan 1

#

domain system

 access-limit disable

 state active

 idle-cut disable

 self-service-url disable

#               

pki domain default

  crl check disable

#

dhcp server ip-pool 192.168.215.0

 network 192.168.215.0 mask 255.255.255.0

 gateway-list 192.168.215.1

 dns-list 59.67.1.1

#

dhcp server ip-pool ippool

 network 192.168.1.0 mask 255.255.255.0

 gateway-list 192.168.1.1

 dns-list 59.67.1.1

#

dhcp server ip-pool jiankong

 network 192.168.2.0 mask 255.255.255.0

 gateway-list 192.168.2.1

 dns-list 59.67.1.1

#

user-group system

#

local-user admin

 password cipher W+A\R:IF-F!QC-&C&"^8CQ!!

 authorization-attribute level 3

 service-type telnet

#

interface NULL0

#

interface GigabitEthernet0/0

 port link-mode route

 ip address 192.168.0.1 255.255.255.0

 undo dhcp select server global-pool

#

interface GigabitEthernet0/1

 port link-mode route

 ip address 192.168.1.1 255.255.255.0

#

interface GigabitEthernet0/2

 port link-mode route

 ip address 192.168.215.1 255.255.255.0

#

interface GigabitEthernet0/3

 port link-mode route

 ip address 192.168.2.1 255.255.255.0

#

interface GigabitEthernet0/4

 port link-mode route

#

interface GigabitEthernet0/5

 port link-mode route

 nat outbound 2001

 nat server protocol tcp global 172.28.0.10 8080 inside 192.168.2.200 www

 nat server protocol tcp global 172.28.0.10 3000 inside 192.168.2.200 3000

 nat server protocol tcp global 172.28.0.10 3001 inside 192.168.2.200 3001

 ip address 172.28.0.10 255.255.254.0

 undo dhcp select server global-pool

#

 ip route-static 0.0.0.0 0.0.0.0 GigabitEthernet0/5 172.28.0.1 preference 1

#

 dhcp server forbidden-ip 192.168.1.200

 dhcp server forbidden-ip 192.168.2.200

#

 dhcp enable

#

 load xml-configuration

#

user-interface con 0

user-interface vty 0 4

 authentication-mode scheme

%Aug 30 14:49:19:423 2024 H3C DEV/4/FAN FAILED:

 Fan 2 failed.