我的端口映射为什么外网出不去，通过web设置怎么解决

 # version 5.20, Release 5142P02 # sysname PQRH-F100-A-SI # ftp server enable # undo voice vlan mac-address 00e0-bb00-0000 # interzone policy default by-priority # domain default enable system # telnet server enable # userlog flow syslog # session synchronization enable # password-recovery enable # blacklist ip 77.158.164.115 blacklist ip 188.16.17.89 blacklist ip 79.167.252.213 blacklist ip 109.242.216.3 # acl number 3000 rule 5 permit ip source 172.16.201.0 0.0.0.255 rule 10 permit ip source 172.16.202.0 0.0.0.255 rule 15 permit ip source 172.16.204.0 0.0.0.255 rule 20 permit ip source 172.16.206.0 0.0.0.255 destination 110.76.0.0 0.0.255.255 rule 21 permit ip source 172.16.206.0 0.0.0.255 destination 123.151.79.0 0.0.0.255 rule 22 permit ip source 172.16.206.0 0.0.0.255 destination 8.8.8.8 0 rule 23 permit ip source 172.16.206.0 0.0.0.255 destination 222.222.222.222 0 rule 24 permit ip source 172.16.206.0 0.0.0.255 destination 114.114.114.114 0 rule 25 permit ip source 172.16.207.0 0.0.0.255 rule 26 permit ip source 172.16.206.0 0.0.0.255 destination 222.223.129.130 0 rule 30 permit ip source 10.10.0.0 0.0.7.255 rule 35 permit ip source 192.168.168.0 0.0.0.255 rule 40 permit ip source 10.11.0.0 0.0.0.255 acl number 3001 rule 0 permit ip source 111.225.238.204 0 destination 172.16.207.210 0 # vlan 1 # domain system access-limit disable state active idle-cut disable self-service-url disable # pki domain default crl check disable # user-group system group-attribute allow-guest # local-user pqrh password cipher 00000000 authorization-attribute level 3 service-type telnet service-type web # interface NULL0 # interface GigabitEthernet0/0 port link-mode route ip address 192.168.0.1 255.255.255.0 # interface GigabitEthernet0/1 port link-mode route nat outbound 3000 port-preserved nat server 1 protocol tcp global current-interface 7890 inside 172.16.207.210 7890 nat server protocol tcp global 111.225.238.204 3389 inside 172.16.207.58 3389 ip address 111.225.238.204 255.255.255.0 # interface GigabitEthernet0/2 port link-mode route nat server 1 protocol tcp global current-interface 7890 inside 172.16.207.210 7890 ip address 192.168.100.2 255.255.255.248 # interface GigabitEthernet0/3 port link-mode route ip address 192.168.100.55 255.255.255.0 dhcp select relay dhcp relay address-check enable # interface GigabitEthernet0/4 port link-mode route # interface GigabitEthernet0/5 port link-mode route # vd Root id 1 # zone name Management id 0 priority 100 import interface GigabitEthernet0/0 zone name Local id 1 priority 100 zone name Trust id 2 priority 85 import interface GigabitEthernet0/2 zone name DMZ id 3 priority 50 zone name Untrust id 4 priority 5 import interface GigabitEthernet0/1 switchto vd Root object service 7890 service tcp destination-port 7890 zone name Management id 0 ip virtual-reassembly zone name Local id 1 ip virtual-reassembly zone name Trust id 2 ip virtual-reassembly zone name DMZ id 3 ip virtual-reassembly zone name Untrust id 4 ip virtual-reassembly interzone source Management destination Local rule 0 permit comment 10 source-ip any_address destination-ip any_address service any_service interzone source Trust destination Untrust interzone source Untrust destination Trust rule 0 permit source-ip any_address destination-ip any_address service any_service interzone source Any destination Any rule 0 permit source-ip any_address destination-ip any_address service any_service rule enable # ip route-static 0.0.0.0 0.0.0.0 111.225.238.1 ip route-static 10.10.0.0 255.255.248.0 192.168.100.1 ip route-static 10.11.0.0 255.255.255.0 192.168.100.1 ip route-static 172.16.206.0 255.255.255.0 192.168.100.1 ip route-static 172.16.207.0 255.255.255.0 192.168.100.1 ip route-static 192.168.168.0 255.255.255.0 192.168.100.1 # ssh server enable sftp server enable # ip https enable # load xml-configuration # load tr069-configuration # user-interface con 0 user-interface vty 0 4 authentication-mode scheme # return