放行全部IP流量
acl advanced 3000 rule permit ip
域间策略应用
[H3C] zone-pair security source Local destination Untrust
用ACL代替object-policy
[H3C-zone-pair-security-Local-Untrust] packet-filter 3000