eNSP中ping虚拟机的直连路由可通，但ping虚拟机不同，且直连路由可以ping通虚拟机

Question

拓扑如下

其中FW1能够ping通192.168.223.34，但ping不通Cloud1，而R2可以ping通Cloud1，不知道为什么？

FW1配置如下

int g1/0/2
ip address 11.1.1.1 24
gateway 11.1.1.10
service-manage ping permit
quit
firewall zone untrust
add interface GigabitEthernet 1/0/2
quit
security-policy
rule name lany
source-zone local
access-authentication
action permit

R1配置如下

#
sys ar1
#
interface GigabitEthernet0/0/0
ip address 11.1.1.10 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 12.1.1.1 255.255.255.0
#
interface GigabitEthernet0/0/2
#
interface LoopBack0
ip address 1.1.1.1 255.255.255.255
#
ospf 1 router-id 1.1.1.1
area 0.0.0.0
network 1.1.1.1 0.0.0.0
network 11.1.1.0 0.0.0.255
network 12.1.1.0 0.0.0.255
#
return

R2配置如下

sys ar2
#
interface GigabitEthernet0/0/0
ip address 12.1.1.2 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 192.168.223.34 255.255.255.0
#
interface LoopBack0
ip address 2.2.2.2 255.255.255.255
#
ospf 1 router-id 2.2.2.2
area 0.0.0.0
network 2.2.2.2 0.0.0.0
network 192.168.223.0 0.0.0.255
network 12.1.1.0 0.0.0.255
#
return

Answer 1

https://blog.csdn.net/qq_41675973/article/details/87871232