【正文】
set policy id 1 name PERMIT_ANY from Trust to Untrust Any Any ANY permitset policy id 1exitset policy id 2 name PERMIT_PING from Untrust to Trust Any MIP() PING permitset policy id 2exitset policy id 4 name PERMIT_CT from Untrust to Trust Any VIP(ethernet0/9) 3389 permit logset policy id 4exitset policy id 5 name PERMIT_CNC from Untrust to Trust Any MIP() 3389 permit logset policy id 5exitset policy id 6 name test from Untrust to Trust Any VIP(ethernet0/8) 3389 permit logset policy id 6exitset policy id 7 name PERMIT_CT_17991 from Untrust to Trust Any VIP(ethernet0/9) 17991 permit logset policy id 7exitset policy id 8 name PERMIT_CNC_17991 from Untrust to Trust Any MIP() 17991 permit logset policy id 8exitset nsmgmt bulkcli reboottimeout 60set ssh version v2set config lock timeout 5unset licensekey autoupdateset ntp server set snmp port listen 161set snmp port trap 162set vrouter untrustvr以下是untrustvr里的路由set sourcerouting enableset route set route set route source set route source set route trustvr preference 20 metric 1exitset vrouter trustvr以下是trustvr里的路由unset adddefaultrouteset route untrustvr preference 20 metric 1exitset vrouter untrustvrexitset vrouter trustvrexit