做完端口映射，用手机可以访问到映射出去的服务，电脑telnet 服务的IP+端口可以通，但是Web界面访问不到服务。（提示如下：

无法访问此网站

网址为 http://111.56.169.253:10080/ 的网页可能暂时无法连接，或者它已永久性地移动到了新网址。

ERR_UNSAFE_PORT）

哪位大佬帮看看，拜谢！！！！！

[FW]DIS current-configuration

#

 version 7.1.064, Release 9560P26

#

 sysname FW

#

 clock protocol none

#

context Admin id 1

#

 telnet server enable

#

 irf mac-address persistent timer

 irf auto-update enable

 undo irf link-delay

 irf member 1 priority 10

 irf member 2 priority 1

#

 ip pool aaa 192.168.255.2 192.168.255.20

 ip pool aaa gateway 192.168.255.1

#

 dns proxy enable

 dns server 8.8.8.8

 dns server 114.114.114.114

 dns server 211.138.91.1

 dns server 211.138.91.2

#

 lldp global enable

#

 password-recovery enable

#

vlan 1

#

vlan 3999

#

vlan 4001

#

irf-port 1/2

 port group interface GigabitEthernet1/0/0

 port group interface GigabitEthernet1/0/1

 port group interface GigabitEthernet1/0/10

 port group interface GigabitEthernet1/0/11

#

irf-port 2/1

 port group interface GigabitEthernet2/0/0

 port group interface GigabitEthernet2/0/1

 port group interface GigabitEthernet2/0/10

 port group interface GigabitEthernet2/0/11

#

controller Cellular1/0/0

#

controller Cellular1/0/1

#

controller Cellular2/0/0

#

controller Cellular2/0/1

#

interface Bridge-Aggregation1

#

interface Route-Aggregation1

 ip address 172.1.1.1 255.255.255.252

 link-aggregation mode dynamic

 link-aggregation selected-port maximum 1

#

interface Virtual-Template1

 ppp authentication-mode chap domain system

 remote address pool aaa

 ip address 192.168.255.1 255.255.255.0

#

interface NULL0

#              

interface Vlan-interface4001

 mad bfd enable

 mad ip address 132.1.1.1 255.255.255.252 member 1

 mad ip address 132.1.1.2 255.255.255.252 member 2

#

interface GigabitEthernet1/0/2

 port link-mode route

 ip address 111.56.169.253 255.255.255.240

 ip last-hop hold

 nat outbound 3000

 nat server protocol tcp global 111.56.169.253 10080 inside 172.20.1.1 8080 rule ServerRule_1

#

interface GigabitEthernet1/0/3

 port link-mode route

#

interface GigabitEthernet1/0/4

 port link-mode route

 ip address 10.1.1.1 255.255.255.0

#

interface GigabitEthernet1/0/6

 port link-mode route

#

interface GigabitEthernet1/0/7

 port link-mode route

#

interface GigabitEthernet1/0/8

 port link-mode route

 port link-aggregation group 1

#

interface GigabitEthernet2/0/2

 port link-mode route

#

interface GigabitEthernet2/0/3

 port link-mode route

#

interface GigabitEthernet2/0/4

 port link-mode route

#

interface GigabitEthernet2/0/5

 port link-mode route

#

interface GigabitEthernet2/0/6

 port link-mode route

#

interface GigabitEthernet2/0/7

 port link-mode route

#

interface GigabitEthernet2/0/8

 port link-mode route

 port link-aggregation group 1

#

interface GigabitEthernet1/0/5

 port link-mode bridge

#

interface GigabitEthernet1/0/9

 port link-mode bridge

 description BFD_XinTiao

 port access vlan 4001

 undo stp enable

#

interface GigabitEthernet2/0/9

 port link-mode bridge

 description BFD_XinTiao

 port access vlan 4001

 undo stp enable

#

interface GigabitEthernet1/0/0

 combo enable fiber

#              

interface GigabitEthernet1/0/1

 combo enable fiber

#

interface GigabitEthernet1/0/10

#

interface GigabitEthernet1/0/11

#

interface GigabitEthernet2/0/0

 combo enable fiber

#

interface GigabitEthernet2/0/1

 combo enable fiber

#

interface GigabitEthernet2/0/10

#

interface GigabitEthernet2/0/11

#

security-zone name Local

#

security-zone name Trust

 import interface GigabitEthernet1/0/8

 import interface GigabitEthernet2/0/8

 import interface Route-Aggregation1

#

security-zone name DMZ

#

security-zone name Untrust

 import interface GigabitEthernet1/0/4

 import interface GigabitEthernet2/0/4

 import interface GigabitEthernet2/0/5

 import interface Virtual-Template1

#

security-zone name Management

 import interface GigabitEthernet1/0/2

#

 scheduler logfile size 16

#

line class aux

 user-role network-operator

#

line class console

 authentication-mode scheme

 user-role network-admin

#

line class vty

 user-role network-operator

#

line aux 0

 user-role network-admin

#

line aux 1

 user-role network-operator

#

line con 0 1

 user-role network-admin

#

line vty 0 63

 authentication-mode scheme

 user-role network-admin

#

 ip route-static 0.0.0.0 0 111.56.169.241

 ip route-static 172.20.0.0 16 172.1.1.2

#

 info-center loghost 127.0.0.1 port 3301 format default

 info-center source CFGLOG loghost level informational

#

performance-management

#

 ssh server enable

 ssh server port 2202

#

 arp ip-conflict log prompt

#

acl advanced 3000

 rule 0 permit ip

#

domain sys

#

domain system

 authentication ppp none

#

 domain default enable system

#

role name level-0

 description Predefined level-0 role

#

role name level-1

 description Predefined level-1 role

#

role name level-2

 description Predefined level-2 role

#              

role name level-3

 description Predefined level-3 role

#

role name level-4

 description Predefined level-4 role

#

role name level-5

 description Predefined level-5 role

#

role name level-6

 description Predefined level-6 role

#

role name level-7

 description Predefined level-7 role

#

role name level-8

 description Predefined level-8 role

#

role name level-9

 description Predefined level-9 role

#

role name level-10

 description Predefined level-10 role

#

role name level-11

 description Predefined level-11 role

#

role name level-12

 description Predefined level-12 role

#

role name level-13

 description Predefined level-13 role

#

role name level-14

 description Predefined level-14 role

#

user-group system

#

local-user admin class manage

 password hash $h$6$UbIhNnPevyKUwfpm$LqR3+yg1IjNct39MkOR0H0iQXLkYB3jMqM4vbAeoXOhbabIIFnjJPEGR00YiYA1Sz4LiY3FmEdru2fOLMb1shQ==

 service-type ssh terminal https

 authorization-attribute user-role level-3

 authorization-attribute user-role network-admin

 authorization-attribute user-role network-operator

#

local-user h3c class manage

 password hash $h$6$IQI+n1A/8O2GDhCW$16SFnMrZF6XRnaHhjxA7DafqtnxEAMlXrc42EXDSxUb6ZzNWqco7zzfHu8Tiy0tqWP3Nb1wtFivF1ZW6phXe7A==

 service-type ssh telnet terminal http https

 authorization-attribute user-role level-15

 authorization-attribute user-role network-operator

#

local-user h3c class network

 password cipher $c$3$6YsDBXTF9PeXtjdieWPQCKckpJbCPqxNjVk=

 service-type ppp

 authorization-attribute user-role network-operator

#

 session statistics enable

 session synchronization enable

#

 ipsec logging negotiation enable

#

l2tp-group 1 mode lns

 allow l2tp virtual-template 1

 undo tunnel authentication

 tunnel name LNS

#

 l2tp enable

#

 ike logging negotiation enable

#

 ip https enable

#

 loadbalance isp file flash:/lbispinfo_v1.5.tp

#

security-policy ip

 rule 0 name any---ANY

  action pass

  source-zone Local

  source-zone Trust

  source-zone DMZ

  source-zone Untrust

  source-zone Management

  destination-zone Local

  destination-zone Trust

  destination-zone DMZ

  destination-zone Untrust

  destination-zone Management

#

 cloud-management server domain opstunnel-seccloud.h3c.com

#