FTP映射失败

telnet端口失败，外网连接FTP是不是和nat alg没配置有关系？  

1. version 7.1.064, Release 060
2. #
3. sysname router2
4. #
5. telnet server enable
6. #
7. port-mapping application ftp port 1025
8. #
9. ip load-sharing mode per-flow global
10. #
11. dhcp enable
12. dhcp server always-broadcast
13. #
14. dns proxy enable
15. dns server 61.139.2.69
16. #
17. password-recovery enable
18. #
19. vlan 1
20. #
21. dhcp server ip-pool 1
22. gateway-list 172.16.1.1
23. network 172.16.1.0 mask 255.255.255.0
24. dns-list 61.139.2.69
25. #
26. controller Cellular0/0
27. #
28. interface NULL0
29. #
30. interface GigabitEthernet0/0
31. port link-mode route
32. description Multiple_Line
33. ip address 222.XX.80.YYY 255.255.255.128
34. tcp mss 1280
35. ip last-hop hold
36. nat outbound
37. #
38. interface GigabitEthernet0/1
39. port link-mode route
40. description Multiple_Line
41. ip address 222.XXX.90.YYY 255.255.255.128
42. ip last-hop hold
43. nat outbound
44. nat server protocol tcp global 222.XXX.90.YYY 1024 inside 172.16.1.254 20
45. nat server protocol tcp global 222.XXX.90.YYY 1025 inside 172.16.1.254 21
46. nat hairpin enable
47. #
48. interface GigabitEthernet0/2
49. port link-mode route
50. combo enable copper
51. ip address 172.16.1.1 255.255.255.0
52. #
53. interface GigabitEthernet0/3
54. port link-mode route
55. description Multiple_Line
56. combo enable copper
57. ip address 171.XXX.209.YYY 255.255.255.128
58. ip last-hop hold
59. nat outbound
60. #
61. interface GigabitEthernet0/4
62. port link-mode route
63. #
64. interface GigabitEthernet0/5
65. port link-mode route
66. #
67. scheduler logfile size 16
68. #
69. line class console
70. user-role network-admin
71. #
72. line class tty
73. user-role network-operator
74. #
75. line class vty
76. user-role network-operator
77. #
78. line con 0
79. user-role network-admin
80. #
81. line vty 0 63
82. authentication-mode scheme
83. user-role network-operator
84. #
85. ip route-static 0.0.0.0 0 222.XXX.80.YYY
86. ip route-static 0.0.0.0 0 222.XXX.90.YYY
87. ip route-static 0.0.0.0 0 171.XXX.209.YYY
88. ip route-static 192.168.0.0 16 10.10.10.2
89. ip route-static 192.168.0.0 16 172.16.1.2
90. #
91. password-control enable 
92. undo password-control aging enable 
93. undo password-control history enable 
94. password-control length 6
95. password-control login-attempt 3 exceed lock-time 10
96. password-control update-interval 0
97. password-control login idle-time 0
98. password-control complexity user-name check
99. #
100. domain system
101. #
102. domain default enable system
103. #
104. role name level-0
105. description Predefined level-0 role
106. #
107. role name level-1
108. description Predefined level-1 role
109. #
110. role name level-2
111. description Predefined level-2 role
112. #
113. role name level-3
114. description Predefined level-3 role
115. #
116. role name level-4
117. description Predefined level-4 role
118. #
119. role name level-5
120. description Predefined level-5 role
121. #
122. role name level-6
123. description Predefined level-6 role
124. #
125. role name level-7
126. description Predefined level-7 role
127. #
128. role name level-8
129. description Predefined level-8 role
130. #
131. role name level-9
132. description Predefined level-9 role
133. #
134. role name level-10
135. description Predefined level-10 role
136. #
137. role name level-11
138. description Predefined level-11 role
139. #
140. role name level-12
141. description Predefined level-12 role
142. #
143. role name level-13
144. description Predefined level-13 role
145. #
146. role name level-14
147. description Predefined level-14 role
148. #
149. user-group system
150. #
151. local-user admin class manage
152. service-type telnet http
153. authorization-attribute user-role network-admin
154. #
155. ip http port 8444
156. ip http enable
157. #
158. wlan global-configuration
159. control-address disable
160. nas-id cm-0-830347-210235A2C7M18
161. 
     
162. wlan ap-group default-group
163. #
164. cloud-management server domain oasis.h3c.com
165. #
166. return