出口防火墙隔离双区域互访

拓扑如下：

PC1为DMZ区，内网只有一台交换机，现在需要分端口给服务区用。

核心侧服务区配置vlan隔开内网和服务区。

配置如下：

防火墙配置：
[USG6000V1]dis current-configuration 
!Software Version V500R001C10
#
sysname USG6000V1
#
 undo l2tp sendaccm enable
 l2tp domain suffix-separator @
#
ip address-set 192.168.100 type object
 address 0 192.168.100.0 mask 24
#
ip address-set 192.168.10 type group
 address 0 192.168.10.0 mask 24
#
 time-range worktime
  period-range 08:00:00 to 18:00:00 working-day
#
aaa
 authentication-scheme default
 authentication-scheme admin_local
 authentication-scheme admin_radius_local
 authentication-scheme admin_hwtacacs_local
 authentication-scheme admin_ad_local
 authentication-scheme admin_ldap