A simple network environment F100-S-G2 (192.168.1.197), an S3600, three servers (the same subnet 192.168.1 ~ 3), to achieve interoperability.
Needless to say, all other configured to the same network address on the line, mainly talk about the configuration F100, F100 default, there are security domain, server to achieve interoperability need to get through F100 and F100 interface security domain.
Configure the network adapter to the Trust security zone
# The 1/0/3 internal network interface to the Trust zone.
[H3C]security-zone name Trust
[H3C-security-zone-Trust]import interface GigabitEthernet 1/0/3
[H3C-security-zone-Trust]quit
# Create Object Policy pass.
[H3C]object-policy ip pass
[H3C-object-policy-ip-pass] rule 0 pass
[H3C-object-policy-ip-pass]quit
Trust configure security policy domain to Local, Local Trust to put the whole domain data through policy
# Trust to create inter-domain policy strategy Local calls pass domain.
[H3C]zone-pair security source Trust destination Local
[H3C-zone-pair-security-Trust-Local]object-policy apply ip pass
[H3C-zone-pair-security-Trust-Local]quit
# Create a Local Trust to domain policy strategy calls pass between domains.
[H3C]zone-pair security source Local destination Trust
[H3C-zone-pair-security-Local-Trust]object-policy apply ip pass
[H3C-zone-pair-security-Local-Trust]quit
Knock down.