f1000-ak135问题

192.168.1.1访问不到172.16.200.x

192.168.1.1是核心下的一个vlan，和防火墙通过vlan100互联，二层聚合，防火墙接服务器172.16.200.x三层口，访问不过去，防火墙访问两边都没问题

核心交换机接口配置
interface Vlan-interface100
 description TO_防火墙三层互联
 ip address 172.16.100.2 255.255.255.252
#
interface GigabitEthernet1/0/23
 port link-mode bridge
 description 聚合口TO_防火墙
 port access vlan 100
 combo enable auto
 port link-aggregation group 1024
#
interface GigabitEthernet1/0/24
 port link-mode bridge
 description 聚合口TO_防火墙
 port access vlan 100
 combo enable auto
 port link-aggregation group 1024
防火墙配置
interface Route-Aggregation1
 description TO_核心
 ip address 172.16.100.1 255.255.255.252
 link-aggregation mode dynamic
 nat hairpin enable
#