防火墙WEB管理不能登陆

H3C F100-A-SI防火墙如下配置：不能从外网web管理15.26.3.3，内网可以web管理10.100.37.1，不知什么原因

sysname XXX

#

 super password level 3 cipher xxx

#

 ike local-name zhejiang

#

 firewall packet-filter enable

 firewall packet-filter default permit

#

 undo insulate

#

 nat address-group 2 15.26.3.3 15.26.3.3

#

 firewall statistic system enable

#

radius scheme system

 server-type extended

#

domain system

#

local-user admin

 password simple XXXX

 service-type telnet

 level 3

#

ike peer zhejiang

 exchange-mode aggressive

 pre-shared-key zhejiang

 id-type name

 remote-name center

 remote-address 2.2.9.1

 nat traversal

#

ipsec proposal zhejiang

 esp authentication-algorithm sha1

 esp encryption-algorithm 3des

#

ipsec policy zhejiang 10 isakmp

 security acl 3000

 ike-peer zhejiang

 proposal zhejiang

#

acl number 2000

 rule 2000 permit source 10.100.37.0 0.0.0.255

#

acl number 3000

 rule 0 permit ip source 10.100.37.0 0.0.0.63 destination 10.100.0.0 0.0.0.255

 rule 255 deny ip

acl number 3002

 rule 0 deny ip source 10.100.37.0 0.0.0.63 destination 10.100.0.0 0.0.0.255

 rule 10 permit icmp

 rule 20 permit tcp

 rule 30 permit udp

#

nat server-group protocol

#

interface Aux0

 async mode flow

#

interface Ethernet0/0

 description WCN_INTERFACE_LAN

 ip address 10.100.37.1 255.255.255.0

#

interface Ethernet1/0

 description WCN_INTERFACE_WAN

 ip address 15.26.3.3 255.255.255.128

 nat outbound 3002 address-group 2

 ipsec policy zhejiang

#

interface Ethernet1/1

#

interface Bridge-template1

#

interface NULL0

#

firewall zone local

 set priority 100

#

firewall zone trust

 add interface Ethernet0/0

 set priority 85

#

firewall zone untrust

 add interface Ethernet1/0

 set priority 5

#

firewall zone DMZ

 set priority 50

#

firewall interzone local trust

#

firewall interzone local untrust

#

firewall interzone local DMZ

#

firewall interzone trust untrust

#

firewall interzone trust DMZ

#

firewall interzone DMZ untrust

#

 ip route-static 0.0.0.0 0.0.0.0 15.26.3.1 preference 60

 ip route-static 10.100.0.0 255.255.255.0 15.26.3.1 preference 60

#

 ip rpf-longest-match

#

user-interface con 0

user-interface aux 0

user-interface vty 0 4

#

return

防火墙H3C F100-A-SI一端接内网一端接外网

外网口E1/0 地址15.26.3.3

内网口E0/0 地址10.100.37.1