1
firewall zone trust
2
 set priority 85
3
 add interface GE0/0/1
4
 add interface GE0/0/9
5
#
6
firewall zone untrust
7
 set priority 5
8
 add interface GE0/0/0
9
#
10
firewall zone dmz
11
 set priority 50
12
 add interface GE0/0/2
13
#
14
interface GE0/0/0
15
 ip address 10.1.1.254 255.255.255.0
16
 vrrp vrid 1 virtual-ip 10.1.1.250 active
17
#
18
interface GE0/0/1
19
 ip address 10.1.2.254 255.255.255.0
20
 vrrp vrid 1 virtual-ip 10.1.2.250 active
21
#
22
interface GE0/0/2
23
 ip address 10.1.3.1 255.255.255.0
24
#
25
hrp authentication-key zaq12wsx
26
hrp interface GE0/0/2 remote 10.1.3.2
27
hrp enable
28
#
29
security-policy
30
 rule name permit-icmp
31
  source-zone trust
32
  destination-zone untrust
33
  source-address 10.1.2.0 mask 255.255.255.0
34
  destination-address 10.1.1.0 mask 255.255.255.0
35
  service icmp
36
  action permit