网络拓扑:
1、基于OSPF路由协议双机热备配置
FW1/FW2防火墙接口安全区域划分:
firewall zone trust
add interface GigabitEthernet1/0/1
firewall zone untrust
add interface GigabitEthernet1/0/2
firewall zone dmz
add interface GigabitEthernet1/0/6
interface GigabitEthernet1/0/1
service-manage ping permit
interface GigabitEthernet1/0/2
service-manage ping permit
interface GigabitEthernet1/0/6
service-manage ping permit
security-policy
default action deny
开启OSPF路由对接协议:
[R1]ospf router-id 1.1.1.1
[R1-ospf-1]area 0
[R2]ospf router-id 2.2.2.2
[R2-ospf-1]area 0
[R3]ospf router-id