防火墙USG6000V：
interface GigabitEthernet1/0/1
ip address 172.16.40.1 255.255.255.0
firewall zone trust
add interface GigabitEthernet1/0/1
ip route-static 172.16.200.0 255.255.255.0 GigabitEthernet1/0/1 172.16.40.254
交换机：
interface Vlanif40
ip address 172.16.40.254 255.255.255.0
interface Vlanif200
ip address 172.16.200.254 255.255.255.0
ip route-static 0.0.0.0 0.0.0.0 172.16.40.1
PC1：
172.16.40.101/24
172.16.40.1
PC2：
172.16.200.101/24
172.16.200.254
PC1能ping通PC2，PC2不能ping通PC1。