防火墙对接路由器实现双机热备企业级实战

网络拓扑：

1、基于OSPF路由协议双机热备配置

FW1/FW2防火墙接口安全区域划分：

firewall zone trust
add interface GigabitEthernet1/0/1
firewall zone untrust
add interface GigabitEthernet1/0/2
firewall zone dmz
add interface GigabitEthernet1/0/6


interface GigabitEthernet1/0/1
service-manage  ping  permit 
interface GigabitEthernet1/0/2
service-manage ping permit
interface GigabitEthernet1/0/6
service-manage ping permit

security-policy
default action deny

开启OSPF路由对接协议：

[R1]ospf router-id 1.1.1.1
[R1-ospf-1]area 0

[R2]ospf router-id 2.2.2.2
[R2-ospf-1]area 0

[R3]ospf router-id