F1000直连路由不通

防火墙到上联路由器的两个直连接口ping不通。

Ping 10.1.2.1 (10.1.2.1): 56 data bytes, press CTRL_C to break 

Request time out

Request time out 

防火墙端。

接口：

GE1/0/1 UP UP 10.1.2.2

GE2/0/1 UP UP 10.1.3.2

 interface GigabitEthernet1/0/1

 port link-mode route 

 combo enable fiber

 ip address 10.1.2.2 255.255.255.252 

interface GigabitEthernet2/0/1

 port link-mode route 

 combo enable fiber 

 ip address 10.1.3.2 255.255.255.252 

安全域:

# security-zone name Trust

 import interface GigabitEthernet1/0/1 

 import interface GigabitEthernet2/0/1 

# security-zone name Untrust 

 import interface GigabitEthernet1/0/2 

 import interface GigabitEthernet2/0/2 

zone-pair security source Local destination Trust 

 packet-filter 3001 

# zone-pair security source Local destination Untrust 

 packet-filter 3001

 # zone-pair security source Trust destination Local

 packet-filter 3001 

# zone-pair security source Trust destination Untrust 

 packet-filter 3001 

# zone-pair security source Untrust destination Local 

 packet-filter 3001 

# zone-pair security source Untrust destination Trust 

 packet-filter 3001

ACL:

acl advanced 3001

 rule 0 permit ip 

路由器端：

GE0/0 up up 10.1.2.1 --

GE0/1 up up 10.1.3.1  

interface GigabitEthernet0/0

 port link-mode route 

 combo enable fiber 

 ip address 10.1.2.1 255.255.255.252 

interface GigabitEthernet0/1 

 port link-mode route 

 combo enable fiber 

 ip address 10.1.3.1 255.255.255.252