Hi Guys,
For the Huawei devices lab, I will using eNSP simulator. You can download it here.
In this topology, I have divided the firewall into two zones, which are untrust and trust zone. Client 4 and Client 2 are in different vlan 100 and 200. Configure FW to be a default GW to vlan 100 and 200 using router on a stick. Then configure the NAT internal server on Firewall.