PC gateway in the core layer , connect Layer 2 switch and usg5300 in the middle, firewall is in transparent mode, PC and equipment management address is not in the same management vlan, PC can't ping passably firewall management address, network structure as shown in figure:
The related devices configuration:
FW configuration
#
firewall packet-filter default permit all
#
interface GigabitEthernet0/0/0
port trunk allow-pass vlan 1 51 to 53 1000 to 1001
#
interface GigabitEthernet0/0/3
port trunk allow-pass vlan 1 51 1001
#
firewall zone trust
add interface GigabitEthernet0/0/1
#
firewall zone untrust
add interface GigabitEthernet0/0/0
#
interface Vlanif1001
ip address 172.254.2.135 255.255.255.192
#
ip route-static 0.0.0.0 0.0.0.0 172.254.2.129
Core SW
#
interface GigabitEthernet 1/1
switchport mode trunk
#
interface VLAN 51
no ip proxy-arp
ip address 172.254.3.2 255.255.255.192
vrrp 1 priority 120
vrrp 1 timers advertise 3
vrrp 1 version 3
vrrp 1 ip 172.254.3.1
vrrp 1 track 172.254.2.140 30
#
interface VLAN 1001
no ip proxy-arp
ip address 172.254.2.130 255.255.255.192
vrrp 1 priority 120
vrrp 1 timers advertise 3
vrrp 1 version 3
vrrp 1 ip 172.254.2.129
convergence SW
#
interface GigabitEthernet 0/16
switchport access vlan 51
#
interface GigabitEthernet 0/17
switchport mode trunk
#
interface VLAN 1001
ip address 172.254.2.141 255.255.255.192
#
ip route 0.0.0.0 0.0.0.0 172.254.2.129