映射服务器失败内网服务器地址加端口号可以访问外网不行运营商已经开通端口

# version 7.1.064, Release 0707P12 # sysname H3C # telnet server enable # dhcp enable dhcp server always-broadcast # dns proxy enable # password-recovery enable # vlan 1 # dhcp server ip-pool lan1 gateway-list 192.168.0.1 network 192.168.0.0 mask 255.255.255.0 address range 192.168.0.2 192.168.0.254 dns-list 192.168.0.1 114.114.114.114 # controller Cellular0/0 # interface Virtual-Template0 # interface NULL0 # interface GigabitEthernet0/0 port link-mode route description Multiple_Line combo enable copper ip address 10.161.245.113 255.255.255.0 dns server 202.102.134.68 tcp mss 1280 nat outbound nat server protocol tcp global current-interface 2000 inside 192.168.1.11 2000 nat server protocol tcp global current-interface 2001 inside 192.168.1.28 2001 nat server protocol tcp global current-interface 2002 inside 192.168.1.30 2002 nat hairpin enable # interface GigabitEthernet0/1 port link-mode route description Multiple_Line bandwidth 50000 combo enable copper ip address 58.58.114.18 255.255.255.252 dns server 219.146.1.66 dns server 219.147.1.66 packet-filter name WebTelnet3 inbound nat outbound nat server protocol tcp global current-interface 22 inside 192.168.1.2 22 nat server protocol tcp global current-interface 82 inside 192.168.1.2 82 nat server protocol tcp global current-interface 443 inside 192.168.1.2 443 nat server protocol tcp global current-interface 810 inside 192.168.1.2 810 nat server protocol tcp global current-interface 5080 inside 192.168.1.2 5080 nat server protocol tcp global current-interface 7086 inside 192.168.1.2 7086 nat server protocol tcp global current-interface 8081 inside 192.168.1.2 8081 nat server protocol tcp global current-interface 8089 inside 192.168.1.2 8089 nat server protocol tcp global current-interface 8090 inside 192.168.1.2 8090 nat server protocol tcp global current-interface 8100 inside 192.168.1.2 8100 nat server protocol tcp global current-interface 8101 inside 192.168.1.2 8101 nat server protocol tcp global current-interface 8102 inside 192.168.1.2 8102 nat server protocol tcp global current-interface 8200 inside 192.168.1.2 8200 nat server protocol tcp global current-interface 8201 inside 192.168.1.2 8201 nat server protocol tcp global current-interface 8443 inside 192.168.1.2 8443 nat server protocol tcp global current-interface 9000 inside 192.168.1.2 9000 nat server protocol tcp global current-interface 9001 inside 192.168.1.2 9001 nat server protocol tcp global current-interface 9006 inside 192.168.1.2 9006 nat server protocol tcp global current-interface 9090 inside 192.168.1.2 9090 nat server protocol tcp global current-interface 9100 inside 192.168.1.2 9100 nat server protocol tcp global current-interface 9200 inside 192.168.1.2 9200 nat server protocol tcp global current-interface 9320 inside 192.168.1.2 9320 nat server protocol tcp global current-interface 9500 inside 192.168.1.2 9500 nat server protocol tcp global current-interface 9600 inside 192.168.1.2 9600 nat server protocol tcp global current-interface 9800 inside 192.168.1.2 9800 nat server protocol tcp global current-interface 50000 inside 192.168.1.2 50000 nat server protocol udp global current-interface 20000 30000 inside 192.168.1.2 20000 30000 nat server protocol udp global current-interface 40000 inside 192.168.1.2 40000 # interface GigabitEthernet0/2 port link-mode route combo enable copper nat hairpin enable undo dhcp select server # interface GigabitEthernet0/3 port link-mode route combo enable copper ip address 192.168.66.1 255.255.255.0 undo dhcp select server # interface GigabitEthernet0/4 port link-mode route # interface GigabitEthernet0/5 port link-mode route # security-zone name Local # security-zone name Trust # security-zone name DMZ # security-zone name Untrust # security-zone name Management # scheduler logfile size 16 # line class console user-role network-admin # line class tty user-role network-operator # line class usb user-role network-admin # line class vty user-role network-operator # line con 0 user-role network-admin # line vty 0 63 authentication-mode scheme user-role network-operator # ip route-static 0.0.0.0 0 GigabitEthernet0/1 58.58.114.17 ip route-static 0.0.0.0 0 GigabitEthernet0/0 10.161.245.1 ip route-static 192.168.1.0 24 GigabitEthernet0/3 192.168.66.2 ip route-static 192.168.2.0 24 GigabitEthernet0/3 192.168.66.2 ip route-static 192.168.3.0 24 GigabitEthernet0/3 192.168.66.2 ip route-static 192.168.4.0 24 GigabitEthernet0/3 192.168.66.2 # ssh server enable ssh server port 4428 # acl advanced name WebTelnet3 rule 65533 deny tcp destination-port eq telnet # password-control enable undo password-control aging enable undo password-control history enable password-control length 6 password-control login-attempt 3 exceed lock-time 10 password-control update-interval 0 password-control login idle-time 0 password-control complexity user-name check # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage service-type telnet http authorization-attribute user-role network-admin # local-user test class manage service-type ssh authorization-attribute user-role network-admin authorization-attribute user-role network-operator # ip https port 4429 ip http enable # wlan global-configuration # wlan ap-group default-group vlan 1 # return

你防火墙的策略没有放通把

外网口加上ip last-hop hold试试

好的谢谢，不过路由器的防火墙没用都