F1090 上连口可以ping通，下连口ping不通对端

麻烦解答一下为什么不通，需不需要写路由，具体说说，谢谢。

sw1:

interface Route-Aggregation300

 link-aggregation mode dynamic

#

interface Route-Aggregation300.300

 ip address 192.168.253.9 255.255.255.252

#

interface GigabitEthernet1/0/1

 port link-mode route

 combo enable fiber

 port link-aggregation group 300

fw1:

#

interface Vlan-interface300

 ip address 192.168.253.10 255.255.255.252

 manage ping inbound

 manage ping outbound

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 300

 combo enable copper

#

interface GigabitEthernet1/0/2

 port link-mode route

 combo enable copper

 ip address 192.168.253.1 255.255.255.252

 manage ping inbound

 manage ping outbound

#

security-zone name Trust

 import interface GigabitEthernet1/0/2

 import interface LoopBack0

#

security-zone name Untrust

 import interface Vlan-interface300

#

security-policy ip

 rule 0 name 1

  action pass

  source-zone Trust

  source-zone lqu

  destination-zone Untrust

 rule 1 name 2

  action pass

  source-zone Untrust

  destination-zone Trust

 rule 2 name 3

  action pass

  source-zone Local

  destination-zone Trust

  destination-zone Untrust

 rule 3 name 4

  action pass

  source-zone Trust

  source-zone Untrust

  destination-zone Local

sw3:

#

interface Route-Aggregation300

 link-aggregation mode dynamic

#

interface Route-Aggregation300.300

 ip address 192.168.253.2 255.255.255.252

#

interface GigabitEthernet1/0/2

 port link-mode route

 combo enable fiber

 port link-aggregation group 300