SecPath F100-M-G 内部服务器无法访问

内部服务器放在192.168.1.164，局域网内其他地址可以访问。在防火墙中添加了内部服务器转发后，外网仍旧不能访问。

GigabitEthernet0/0  ，接内网

GigabitEthernet0/1 ，接外网 

#

 version 5.20, Release 5142P02

#

 sysname H3C

#

 undo voice vlan mac-address 0000-bb00-0xx0

#

 interzone policy default by-priority

#

 domain default enable system

#

 telnet server enable

#

 undo alg dns

 undo alg rtsp

 undo alg h323

 undo alg sip

 undo alg sqlnet

 undo alg pptp

 undo alg ils

 undo alg nbt

 undo alg msn

 undo alg qq

 undo alg tftp

 undo alg sccp

 undo alg gtp

#

session synchronization enable

#

 password-recovery enable

#

acl number 2000

 rule 0 permit

#

vlan 1

#

domain system

 access-limit disable

 state active

 idle-cut disable

 self-service-url disable

#

pki domain default

  crl check disable

……………………

#

interface NULL0

#

interface GigabitEthernet0/0

 port link-mode route

 ip address 192.168.1.1 255.255.255.0

#

interface GigabitEthernet0/1

 port link-mode route

 nat outbound

 nat server protocol tcp global current-interface 8080 inside 192.168.1.169

 www

 ip address 218.15.198.186 255.255.255.248

#

interface GigabitEthernet0/2

 port link-mode route

#

interface GigabitEthernet0/3

 port link-mode route

#

interface GigabitEthernet0/4

 port link-mode route

#

interface GigabitEthernet0/5

 port link-mode route

 ip address 192.168.2.1 255.255.255.0

#

vd Root id 1

#

zone name Management id 0

 priority 100

 import interface GigabitEthernet0/0

 import interface GigabitEthernet0/1

zone name Local id 1

 priority 100

zone name Trust id 2

 priority 85

zone name DMZ id 3

 priority 50

zone name Untrust id 4

 priority 5

switchto vd Root

 zone name Management id 0

 ip virtual-reassembly

 zone name Local id 1

 ip virtual-reassembly

 zone name Trust id 2

 ip virtual-reassembly

 zone name DMZ id 3

 ip virtual-reassembly

 zone name Untrust id 4

 ip virtual-reassembly

#

 ip route-static 0.0.0.0 0.0.0.0 218.15.198.185

#

 load xml-configuration

#

 load tr069-configuration

#

user-interface con 0

user-interface vty 0 4

 authentication-mode scheme

#

return