防火墙问题

公司与集团上联路由器地址为10.15.250.25，下联路由器外网接口为10.15.250.26 内部接口为10.15.175.252 ，下接f1000-AK115防火墙，地址为10.15.175.253 再下联中心交换机10.15.175.254  。现10.15.250.25能够ping通所有网络地址，但是在交换机上新加了一台服务器10.15.175.100，集团上联和下联路由器均ping不通该服务器，跳开防火墙后通信正常，以下是防火墙的配置，麻烦问一下，问题出在哪里？

<XLGL-SNTYQ-F>dis cur 

# version 7.1.064, Release 9514P17 

# sysname XLGL-SNTYQ-F 

# context Admin id 1 

# telnet server enable 

# irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1 

# password-recovery enable # vlan 1 

# object-group ip address telnet-fw-10.15.175.253 

0 network host address 10.15.175.253 

# object-group ip address telnet-sw-10.15.175.254

 0 network host address 10.15.175.254 

# interface NULL0

 # interface Vlan-interface1 ip address 10.15.175.253 255.255.255.0 

# interface GigabitEthernet1/0/2 port link-mode route ip address 192.168.1.1 255.255.255.0 

# interface GigabitEthernet1/0/3 port link-mode route

# interface GigabitEthernet1/0/4 port link-mode route 

# interface GigabitEthernet1/0/5 port link-mode route 

# interface GigabitEthernet1/0/6 port link-mode route 

# interface GigabitEthernet1/0/7 port link-mode route 

# interface GigabitEthernet1/0/8 port link-mode route 

# interface GigabitEthernet1/0/9 port link-mode route 

# interface GigabitEthernet1/0/0 

port link-mode bridge 

description to-XLGL-SNTYQ-R_G0/1 

combo enable copper 

# interface GigabitEthernet1/0/1 

port link-mode bridge description to-XLGL-SNTYQ-S_G0/0/24 

combo enable copper # security-zone name Local 

# security-zone name Trust 

import interface GigabitEthernet1/0/1 vlan 1 to 4094 

# security-zone name DMZ 

# security-zone name Untrust import interface Vlan-interface1

import interface GigabitEthernet1/0/0 vlan 1 to 4094 

# security-zone name Management 

import interface GigabitEthernet1/0/2 

# zone-pair security source Trust destination Untrust

# zone-pair security source Untrust destination Local 

# zone-pair security source Untrust destination Trust 

# scheduler logfile size 16 

# line class aux user-role network-operator 

# line class console authentication-mode scheme user-role network-admin user-role network-operator 

# line class vty user-role network-operator 

# line aux 0 user-role network-admin 

# line con 0 user-role network-admin 

# line vty 0 63 authentication-mode scheme user-role network-admin 

# ip route-static 0.0.0.0 0 10.15.175.252 

# ssh server enable 

# domain system 

# aaa session-limit ftp 16 aaa session-limit telnet 16 aaa session-limit ssh 16 domain default enable system

# role name level-0 description Predefined level-0 role 

# role name level-1 description Predefined level-1 role 

# role name level-2 description Predefined level-2 role 

# role name level-3 description Predefined level-3 role 

# role name level-4 description Predefined level-4 role 

# role name level-5 description Predefined level-5 role 

# role name level-6 description Predefined level-6 role 

# role name level-7 description Predefined level-7 role 

# role name level-8 description Predefined level-8 role 

# role name level-9 description Predefined level-9 role 

# role name level-10 description Predefined level-10 role 

# role name level-11 description Predefined level-11 role

 # role name level-12 description Predefined level-12 role 

# role name level-13 description Predefined level-13 role 

# role name level-14 description Predefined level-14 role 

# user-group system 

# local-user admin class manage password hash $h$6$UbIhNnPevyKUwfpm$LqR3+yg1IjNct39MkOR0H0iQXLkYB3jMqM4vbAeoXOh babIIFnjJPEGR00YiYA1Sz4LiY3FmEdru2fOLMb1shQ== service-type ssh terminal https authorization-attribute user-role level-3 authorization-attribute user-role network-admin authorization-attribute user-role network-operator 

# local-user nmgsl class manage password hash $h$6$9mLPAbLRm5YWbi6o$7e2UR5rdjBgQtt4VsJ/JOCi/83xutyrMuXFuDWfpCaE U9gAWAQaMmmBpFByB7C1enb2bsTjfILWJzEQGypJzaA== service-type ftp service-type telnet https authorization-attribute work-directory flash:/ authorization-attribute user-role network-admin authorization-attribute user-role network-operator 

# ip https enable webui log enable 

# security-policy ip rule 0 name trust-untrust-0 action pass source-zone Trust destination-zone Untrust rule 1 name untrust-local-1 action pass source-zone Untrust destination-zone Local destination-ip telnet-fw-10.15.175.253 rule 2 name untrust-trust-2 action pass source-zone Untrust destination-zone Trust destination-ip telnet-sw-10.15.175.254 

# return