>>372
お手本

ip lan1 address 192.168.1.1/24
ip lan2 address 192.168.2.1/24
ip filter 101 reject 192.168.2.1/24 192.168.1.1/24 * icmp
ip filter 199 pass * *
ip filter 201 reject 192.168.1.1/24 192.168.2.1/24 * icmp
ip filter 299 pass * *
ip lan1 secure filter out 101 199
ip lan1 secure filter in 199
ip lan2 secure filter out 201 299
ip lan2 secure filter in 299

LAN1-LAN2間のicmp以外は、デフォルトでパケットが通るので注意