usg2130 虚拟服务器,USG2130防火墙透明模式，trust-dmz禁止所有流量，仍然可以互通...

1、USG2130防火墙透明模式,trust-dmz禁止所以流量,仍然可以互通

2、配置如下:(相关配置)

firewall packet-filter default deny interzone trust dmz direction inbound

firewall packet-filter default deny interzone trust dmz direction outbound

#

interface Ethernet1/0/0

portswitch

port link-type access

#

interface Ethernet1/0/1

portswitch

port link-type access

#

interface Ethernet1/0/2

portswitch

port link-type access

#

interface Ethernet1/0/3

portswitch

port link-type access

#

interface Ethernet1/0/4

portswitch

port link-type access

#

interface Ethernet1/0/5

portswitch

port link-type access

#

firewall zone trust

set priority 85

add interface Ethernet1/0/0

add interface Ethernet1/0/2

add interface Ethernet1/0/3

add interface Ethernet1/0/4

add interface Ethernet1/0/5

#

firewall zone dmz

set priority 50

add interface Ethernet1/0/1

#