拓扑如下
其中FW1能够ping通192.168.223.34，但ping不通Cloud1，而R2可以ping通Cloud1，不知道为什么？
FW1配置如下
int g1/0/2
ip address 11.1.1.1 24
gateway 11.1.1.10
service-manage ping permit
quit
firewall zone untrust
add interface GigabitEthernet 1/0/2
quit
security-policy
rule name lany
source-zone local
access-authentication
action permit
R1配置如下
#
sys ar1
#
interface GigabitEthernet0/0/0
ip address 11.1.1.10 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 12.1.1.1 255.255.255.0
#
interface GigabitEthernet0/0/2
#
interface LoopBack0
ip address 1.1.1.1 255.255.255.255
#
ospf 1 router-id 1.1.1.1
area 0.0.0.0
network 1.1.1.1 0.0.0.0
network 11.1.1.0 0.0.0.255
network 12.1.1.0 0.0.0.255
#
return
R2配置如下
sys ar2
#
interface GigabitEthernet0/0/0
ip address 12.1.1.2 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 192.168.223.34 255.255.255.0
#
interface LoopBack0
ip address 2.2.2.2 255.255.255.255
#
ospf 1 router-id 2.2.2.2
area 0.0.0.0
network 2.2.2.2 0.0.0.0
network 192.168.223.0 0.0.0.255
network 12.1.1.0 0.0.0.255
#
return
