SECPATH F100-C-G2 端口映射后内网不能通过域名访问内部服务器

SECPATH F100-C-G2 端口映射后，外网可以通过域名访问内部服务器，但是内网不能通过域名访问内部服务器，内网只能用本地IP地址访问。

# version 7.1.064, Release 9510P12 # sysname F100-C-G2 # clock timezone Beijing add 08:00:00 clock protocol ntp context 1 # context Admin id 1 # telnet server enable # irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1 # dialer-group 1 rule ip permit # lldp global enable # password-recovery enable # vlan 1 # ddns policy 3322 url ***.*** username hairankeji password cipher $c$3$mTAwMoPnEA7bZPo5FpOLFZHJqLysaHIYv7ksW6k= interval 0 0 1 # ddns policy ddns url ***.*** username hairankeji password cipher $c$3$L5W9I4jKS3Y8R3zkyBa3PHEyHm3Yh9v3HwWPG9E= # ddns policy dnspod url ***.*** username 371666 password cipher $c$3$B66Gr7GMwhugS/ooJvVYFQtPq1TsksjMdBUQxmTetR8gUKrNKRz8r+Kiu7085w8J+tD6 interval 0 0 1 # interface Dialer0 mtu 1492 ppp chap password cipher $c$3$XsAc9yFAsKYQO5mnRCOnr08XIpvC6cI2cA== ppp chap user 02367871612 ppp ipcp dns admit-any ppp ipcp dns request ppp pap local-user 02367871612 password cipher $c$3$7/+VzsW4S1SAMkd9wb12W42UiU9lmfK3Tg== dialer bundle enable dialer-group 1 dialer timer idle 0 dialer timer autodial 5 ip address ppp-negotiate tcp mss 1280 nat outbound nat server protocol tcp global current-interface inside 192.168.1.100 ddns apply policy ddns fqdn ***.*** ddns apply policy dnspod fqdn ***.*** ddns apply policy 3322 fqdn ***.*** # interface NULL0 # interface GigabitEthernet1/0/0 port link-mode route combo enable copper pppoe-client dial-bundle-number 0 # interface GigabitEthernet1/0/1 port link-mode route combo enable copper speed 100 ip address 192.168.0.1 255.255.255.0 # interface GigabitEthernet1/0/2 port link-mode route ip address 192.168.1.1 255.255.255.0 nat hairpin enable # interface GigabitEthernet1/0/3 port link-mode route # interface GigabitEthernet1/0/4 port link-mode route # interface GigabitEthernet1/0/5 port link-mode route # interface GigabitEthernet1/0/6 port link-mode route # interface GigabitEthernet1/0/7 port link-mode route # interface GigabitEthernet1/0/8 port link-mode route # interface GigabitEthernet1/0/9 port link-mode route # interface GigabitEthernet1/0/10 port link-mode route # interface GigabitEthernet1/0/11 port link-mode route # object-policy ip Any-Any rule 0 pass logging counting # security-zone name Local # security-zone name Trust import interface GigabitEthernet1/0/1 # security-zone name DMZ # security-zone name Untrust import interface Dialer0 import interface GigabitEthernet1/0/0 # security-zone name Management import interface GigabitEthernet1/0/2 # zone-pair security source Any destination Any object-policy apply ip Any-Any # scheduler logfile size 16 # line class aux user-role network-operator # line class console authentication-mode scheme user-role network-admin # line class vty user-role network-operator # line aux 0 user-role network-admin # line con 0 authentication-mode scheme user-role network-admin # line vty 0 63 authentication-mode scheme user-role network-admin # ip route-static 0.0.0.0 0 Dialer0 # ssh server enable ssh user admin service-type stelnet authentication-type password # domain system # aaa session-limit ftp 16 aaa session-limit telnet 16 aaa session-limit ssh 16 domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$jbP+pKI7ceqY9eCG$PALHnwt8ZU0C0OWwftx3iv4gFEch34sgJiRd5nTKYDRo4wMDXYnIJrZwd+QczDmKUWRWktN0ErRKtF4g6x7wPA== service-type ssh telnet terminal http https authorization-attribute user-role level-3 authorization-attribute user-role network-admin authorization-attribute user-role network-operator # local-user test class manage password hash $h$6$w8JjZ31JCIaAq8Wb$uSIgcvwFKRiQR+LavtQgpj/KSUDjFOmKhe4wIuJL99y8IvsZPQ/niogS5CVwbxlFKeotC+At7ZfNC6//8/wwSQ== service-type ftp authorization-attribute user-role level-15 authorization-attribute user-role network-operator # ftp server enable # ip http enable # return