如图
配置命令如下:
FW1:
//添加端口IP
[USG6000V1-GigabitEthernet0/0/0]interface GigabitEthernet0/0/1
[USG6000V1-GigabitEthernet0/0/1]ip add 192.168.1.1 24
[USG6000V1]inter g0/0/2
[USG6000V1-GigabitEthernet0/0/2]ip add 10.0.0.1 24
[USG6000V1]ip route-static 0.0.0.0 0 0.0.0.0 10.0.0.2
[USG6000V1]firewall zone trust
[USG6000V1-zone-trust]add interface GigabitEthernet 0/0/1
[USG6000V1]firewall zone untrust
[USG6000V1]-zone-untrust]add interface GigabitEthernet 0/0/2
[USG6000V1]-policy-security]default action permit
FW2:
[USG6000V1]inter g0/0/1
[USG6000V1-GigabitEthernet0/0/1]ip add 192.168.2.1 24
[USG6000V1-GigabitEthernet0/0/1]
[USG6000V1]inter g0/0/2
[USG6000V1-GigabitEthernet0/0/2]ip add 10.0.0.2 24
[USG6000V1]ip route-static 0.0.0.0 0 10.0.0.1
[USG6000V1]firewall zone untrust
[USG6000V1-zone-untrust]add interface GigabitEthernet 0/0/2
[USG6000V1]firewall zone trust
[USG6000V1-zone-trust]add interface GigabitEthernet 0/0/1
[USG6000V1]-policy-security]default action permit