H3C防火墙设置RMB（dual-active模式）

 device A配置如下

device A配置

int g1/0/1

ip add 2.1.1.1 24

int g1/0/2

ip add 10.1.1.1  24

security-zone name untrust

 import interface gigabitethernet 1/0/1

 security-zone name trust

 import interface gigabitethernet 1/0/2

security-policy ip

rule name trust-untrust

source-zone trust

d