F100-C80-WiNet 端口透明模式传输

防火墙放在路由器及三层交换机之间，为了不改变原有的配置，把防火墙连接路由器和三层交换机的端口分别配置为bridge模式，然后配置了vlan的管理ip，老师能否给个像这种配置的案例；另外现在遇到的情况是从内网管理防火墙无法连接上，请老师指点！

我现在是这样配置的，请老师指点对错：

# interface Vlan-interface1000 ip address 10.10.10.2 255.255.255.248

# interface GigabitEthernet1/0/3 port link-mode bridge port access vlan 1000

 # interface GigabitEthernet1/0/4 port link-mode bridge port access vlan 1000

# security-zone name Trust import interface Vlan-interface1000 import interface GigabitEthernet1/0/3 vlan 1000

# security-zone name Untrust import interface GigabitEthernet1/0/4 vlan 1000

# zone-pair security source Local destination Trust 

 packet-filter 3000

# zone-pair security source Local destination Untrust 

 packet-filter 3000

# zone-pair security source Trust destination Local

 packet-filter 3000

# zone-pair security source Trust destination Untrust 

 packet-filter 3000

# acl advanced 3000 

 rule 0 permit ip source 192.168.0.0 0.0.255.255 

 rule 15 permit ip source 10.10.10.0 0.0.0.7