防火墙端口映射失败

内网是可以访问的，telnet端口也可以通

映射了两个端口，一个8084，一个5000，内外网端口一致

dis cu # version 5.20, Release 5142P02 # sysname F100-S-G # undo voice vlan mac-address 00e0-bb00-0000 # interzone policy default by-priority # domain default enable system # telnet server enable # port-security enable # undo alg dns undo alg rtsp undo alg h323 undo alg sip undo alg sqlnet undo alg pptp undo alg ils undo alg nbt undo alg msn undo alg qq undo alg tftp undo alg sccp undo alg gtp # session synchronization enable session mode hybrid # password-recovery enable # acl number 2005 rule 10 permit source 10.24.10.0 0.0.0.255 rule 15 permit source 100.100.100.4 0.0.0.3 rule 20 permit source 10.24.60.0 0.0.0.255 rule 25 permit source 10.24.11.0 0.0.0.255 acl number 2006 rule 0 permit source 10.24.10.0 0.0.0.255 rule 10 permit source 10.24.11.0 0.0.0.255 # vlan 1 # vlan 100 description 办公网络 # vlan 110 description 监控网络 # vlan 130 description 生产网络 # domain system access-limit disable state active idle-cut disable self-service-url disable # pki domain default crl check disable # user-group system group-attribute allow-guest # local-user admin password cipher $c$3$Ak3DJff1GS1ttXh24LfFwRZmiCWE/htWxdVv authorization-attribute level 3 service-type telnet service-type web # cwmp undo cwmp enable # interface NULL0 # interface GigabitEthernet0/0 port link-mode route qos max-bandwidth 1000000 ip address 192.168.0.1 255.255.255.0 qos lr outbound cir 1000000 cbs 19375000 # interface GigabitEthernet0/1 port link-mode route description to-waiwang nat outbound nat outbound 2005 nat server protocol tcp global 118.122.194.67 4899 inside 10.24.11.130 4899 nat server protocol udp global 118.122.194.67 4899 inside 10.24.11.130 4899 nat server protocol tcp global 118.122.194.67 554 inside 10.24.11.1 554 nat server protocol tcp global 118.122.194.67 8081 inside 10.24.11.1 www nat server protocol tcp global 118.122.194.67 61616 inside 10.24.11.1 61616 nat server protocol tcp global 118.122.194.67 6000 inside 10.24.11.1 6000 nat server protocol tcp global 118.122.194.67 6010 inside 10.24.11.1 6010 nat server protocol tcp global 118.122.194.67 6001 inside 10.24.11.1 6001 nat server protocol udp global 118.122.194.67 10000 inside 10.24.11.1 10000 nat server protocol udp global 118.122.194.67 10001 inside 10.24.11.1 10001 nat server protocol tcp global 118.122.194.67 6300 inside 10.24.11.1 6300 nat server protocol tcp global 118.122.194.67 6302 inside 10.24.11.1 6302 nat server protocol tcp global 118.122.194.67 6357 inside 10.24.11.1 6357 nat server protocol tcp global 118.122.194.67 6366 inside 10.24.11.1 6366 nat server protocol tcp global 118.122.194.67 6354 inside 10.24.11.1 6354 nat server protocol tcp global 118.122.194.67 6310 inside 10.24.11.1 6310 nat server protocol tcp global 118.122.194.67 6301 inside 10.24.11.1 6301 nat server protocol udp global 118.122.194.67 15000 inside 10.24.11.1 15000 nat server protocol udp global 118.122.194.67 15001 inside 10.24.11.1 15001 nat server protocol udp global 118.122.194.67 10002 inside 10.24.11.1 10002 nat server protocol udp global 118.122.194.67 10003 inside 10.24.11.1 10003 nat server protocol udp global 118.122.194.67 10004 inside 10.24.11.1 10004 nat server protocol udp global 118.122.194.67 10005 inside 10.24.11.1 10005 nat server protocol udp global 118.122.194.67 10006 inside 10.24.11.1 10006 nat server protocol udp global 118.122.194.67 10007 inside 10.24.11.1 10007 nat server protocol udp global 118.122.194.67 10008 inside 10.24.11.1 10008 nat server protocol udp global 118.122.194.67 10009 inside 10.24.11.1 10009 nat server protocol udp global 118.122.194.67 10010 inside 10.24.11.1 10010 nat server protocol udp global 118.122.194.67 10011 inside 10.24.11.1 10011 nat server protocol udp global 118.122.194.67 10012 inside 10.24.11.1 10012 nat server protocol udp global 118.122.194.67 10013 inside 10.24.11.1 10013 nat server protocol udp global 118.122.194.67 10014 inside 10.24.11.1 10014 nat server protocol udp global 118.122.194.67 10015 inside 10.24.11.1 10015 nat server protocol udp global 118.122.194.67 10016 inside 10.24.11.1 10016 nat server protocol udp global 118.122.194.67 10017 inside 10.24.11.1 10017 nat server protocol udp global 118.122.194.67 10018 inside 10.24.11.1 10018 nat server protocol udp global 118.122.194.67 10019 inside 10.24.11.1 10019 nat server protocol udp global 118.122.194.67 10020 inside 10.24.11.1 10020 nat server protocol udp global 118.122.194.67 10021 inside 10.24.11.1 10021 nat server protocol udp global 118.122.194.67 10022 inside 10.24.11.1 10022 nat server protocol udp global 118.122.194.67 10023 inside 10.24.11.1 10023 nat server protocol udp global 118.122.194.67 10024 inside 10.24.11.1 10024 nat server protocol udp global 118.122.194.67 10025 inside 10.24.11.1 10025 nat server protocol udp global 118.122.194.67 10026 inside 10.24.11.1 10026 nat server protocol udp global 118.122.194.67 10027 inside 10.24.11.1 10027 nat server protocol udp global 118.122.194.67 10028 inside 10.24.11.1 10028 nat server protocol tcp global 118.122.194.67 6400 inside 10.24.11.1 6400 nat server protocol tcp global 118.122.194.67 6402 inside 10.24.11.1 6402 nat server protocol tcp global 118.122.194.67 6454 inside 10.24.11.1 6454 nat server protocol tcp global 118.122.194.67 6410 inside 10.24.11.1 6410 nat server protocol tcp global 118.122.194.67 6401 inside 10.24.11.1 6401 nat server protocol tcp global 118.122.194.67 6100 inside 10.24.11.1 6100 nat server protocol udp global 118.122.194.67 10029 inside 10.24.11.1 10029 nat server protocol udp global 118.122.194.67 10030 inside 10.24.11.1 10030 nat server protocol udp global 118.122.194.67 10031 inside 10.24.11.1 10031 nat server protocol udp global 118.122.194.67 10032 inside 10.24.11.1 10032 nat server protocol udp global 118.122.194.67 10033 inside 10.24.11.1 10033 nat server protocol udp global 118.122.194.67 10034 inside 10.24.11.1 10034 nat server protocol udp global 118.122.194.67 10035 inside 10.24.11.1 10035 nat server protocol udp global 118.122.194.67 10036 inside 10.24.11.1 10036 nat server protocol udp global 118.122.194.67 10037 inside 10.24.11.1 10037 nat server protocol udp global 118.122.194.67 10038 inside 10.24.11.1 10038 nat server protocol udp global 118.122.194.67 10039 inside 10.24.11.1 10039 nat server protocol udp global 118.122.194.67 10040 inside 10.24.11.1 10040 nat server protocol udp global 118.122.194.67 10041 inside 10.24.11.1 10041 nat server protocol udp global 118.122.194.67 10042 inside 10.24.11.1 10042 nat server protocol udp global 118.122.194.67 10043 inside 10.24.11.1 10043 nat server protocol udp global 118.122.194.67 10044 inside 10.24.11.1 10044 nat server protocol udp global 118.122.194.67 10045 inside 10.24.11.1 10045 nat server protocol udp global 118.122.194.67 10046 inside 10.24.11.1 10046 nat server protocol udp global 118.122.194.67 10047 inside 10.24.11.1 10047 nat server protocol udp global 118.122.194.67 10048 inside 10.24.11.1 10048 nat server protocol udp global 118.122.194.67 10049 inside 10.24.11.1 10049 nat server protocol udp global 118.122.194.67 10050 inside 10.24.11.1 10050 qos max-bandwidth 1000000 ip address 118.122.194.67 255.255.255.0 qos lr outbound cir 1000000 cbs 19375000 # interface GigabitEthernet0/2 port link-mode route qos max-bandwidth 1000000 ip address 100.100.100.5 255.255.255.252 qos lr outbound cir 1000000 cbs 19375000 # interface GigabitEthernet0/3 port link-mode route description to-yidong nat outbound nat outbound 2005 nat server protocol tcp global 117.172.146.74 4899 inside 10.24.11.130 4899 nat server protocol udp global 117.172.146.74 4899 inside 10.24.11.130 4899 nat server protocol tcp global 117.172.146.74 554 inside 10.24.11.1 554 nat server protocol tcp global 117.172.146.74 8081 inside 10.24.11.1 www nat server protocol tcp global 117.172.146.74 61616 inside 10.24.11.1 61616 nat server protocol tcp global 117.172.146.74 6000 inside 10.24.11.1 6000 nat server protocol tcp global 117.172.146.74 6010 inside 10.24.11.1 6010 nat server protocol tcp global 117.172.146.74 6001 inside 10.24.11.1 6001 nat server protocol udp global 117.172.146.74 10000 inside 10.24.11.1 10000 nat server protocol udp global 117.172.146.74 10001 inside 10.24.11.1 10001 nat server protocol tcp global 117.172.146.74 6300 inside 10.24.11.1 6300 nat server protocol tcp global 117.172.146.74 6302 inside 10.24.11.1 6302 nat server protocol tcp global 117.172.146.74 6357 inside 10.24.11.1 6357 nat server protocol tcp global 117.172.146.74 6366 inside 10.24.11.1 6366 nat server protocol tcp global 117.172.146.74 6354 inside 10.24.11.1 6354 nat server protocol tcp global 117.172.146.74 6310 inside 10.24.11.1 6310 nat server protocol tcp global 117.172.146.74 6301 inside 10.24.11.1 6301 nat server protocol udp global 117.172.146.74 15000 inside 10.24.11.1 15000 nat server protocol udp global 117.172.146.74 15001 inside 10.24.11.1 15001 nat server protocol udp global 117.172.146.74 10002 inside 10.24.11.1 10002 nat server protocol udp global 117.172.146.74 10003 inside 10.24.11.1 10003 nat server protocol udp global 117.172.146.74 10004 inside 10.24.11.1 10004 nat server protocol udp global 117.172.146.74 10005 inside 10.24.11.1 10005 nat server protocol udp global 117.172.146.74 10006 inside 10.24.11.1 10006 nat server protocol udp global 117.172.146.74 10007 inside 10.24.11.1 10007 nat server protocol udp global 117.172.146.74 10008 inside 10.24.11.1 10008 nat server protocol udp global 117.172.146.74 10009 inside 10.24.11.1 10009 nat server protocol udp global 117.172.146.74 10010 inside 10.24.11.1 10010 nat server protocol udp global 117.172.146.74 10011 inside 10.24.11.1 10011 nat server protocol udp global 117.172.146.74 10012 inside 10.24.11.1 10012 nat server protocol udp global 117.172.146.74 10013 inside 10.24.11.1 10013 nat server protocol udp global 117.172.146.74 10014 inside 10.24.11.1 10014 nat server protocol udp global 117.172.146.74 10015 inside 10.24.11.1 10015 nat server protocol udp global 117.172.146.74 10016 inside 10.24.11.1 10016 nat server protocol udp global 117.172.146.74 10017 inside 10.24.11.1 10017 nat server protocol udp global 117.172.146.74 10018 inside 10.24.11.1 10018 nat server protocol udp global 117.172.146.74 10019 inside 10.24.11.1 10019 nat server protocol udp global 117.172.146.74 10020 inside 10.24.11.1 10020 nat server protocol udp global 117.172.146.74 10021 inside 10.24.11.1 10021 nat server protocol udp global 117.172.146.74 10022 inside 10.24.11.1 10022 nat server protocol udp global 117.172.146.74 10023 inside 10.24.11.1 10023 nat server protocol udp global 117.172.146.74 10024 inside 10.24.11.1 10024 nat server protocol udp global 117.172.146.74 10025 inside 10.24.11.1 10025 nat server protocol udp global 117.172.146.74 10026 inside 10.24.11.1 10026 nat server protocol udp global 117.172.146.74 10027 inside 10.24.11.1 10027 nat server protocol udp global 117.172.146.74 10028 inside 10.24.11.1 10028 nat server protocol tcp global 117.172.146.74 6400 inside 10.24.11.1 6400 nat server protocol tcp global 117.172.146.74 6402 inside 10.24.11.1 6402 nat server protocol tcp global 117.172.146.74 6454 inside 10.24.11.1 6454 nat server protocol tcp global 117.172.146.74 6410 inside 10.24.11.1 6410 nat server protocol tcp global 117.172.146.74 6401 inside 10.24.11.1 6401 nat server protocol tcp global 117.172.146.74 6100 inside 10.24.11.1 6100 nat server protocol udp global 117.172.146.74 10029 inside 10.24.11.1 10029 nat server protocol udp global 117.172.146.74 10030 inside 10.24.11.1 10030 nat server protocol udp global 117.172.146.74 10031 inside 10.24.11.1 10031 nat server protocol udp global 117.172.146.74 10032 inside 10.24.11.1 10032 nat server protocol udp global 117.172.146.74 10033 inside 10.24.11.1 10033 nat server protocol udp global 117.172.146.74 10034 inside 10.24.11.1 10034 nat server protocol udp global 117.172.146.74 10035 inside 10.24.11.1 10035 nat server protocol udp global 117.172.146.74 10036 inside 10.24.11.1 10036 nat server protocol udp global 117.172.146.74 10037 inside 10.24.11.1 10037 nat server protocol udp global 117.172.146.74 10038 inside 10.24.11.1 10038 nat server protocol udp global 117.172.146.74 10039 inside 10.24.11.1 10039 nat server protocol udp global 117.172.146.74 10040 inside 10.24.11.1 10040 nat server protocol udp global 117.172.146.74 10041 inside 10.24.11.1 10041 nat server protocol udp global 117.172.146.74 10042 inside 10.24.11.1 10042 nat server protocol udp global 117.172.146.74 10043 inside 10.24.11.1 10043 nat server protocol udp global 117.172.146.74 10044 inside 10.24.11.1 10044 nat server protocol udp global 117.172.146.74 10045 inside 10.24.11.1 10045 nat server protocol udp global 117.172.146.74 10046 inside 10.24.11.1 10046 nat server protocol udp global 117.172.146.74 10047 inside 10.24.11.1 10047 nat server protocol udp global 117.172.146.74 10048 inside 10.24.11.1 10048 nat server protocol udp global 117.172.146.74 10049 inside 10.24.11.1 10049 nat server protocol udp global 117.172.146.74 10050 inside 10.24.11.1 10050 nat server protocol tcp global 117.172.146.74 8084 inside 10.24.11.243 8084 nat server protocol tcp global 117.172.146.74 5000 inside 10.24.11.243 5000 qos max-bandwidth 1000000 ip address 117.172.146.74 255.255.255.0 qos lr outbound cir 1000000 cbs 19375000 dns server 183.221.253.100 # interface GigabitEthernet0/4 port link-mode route description to-S7503E-S qos max-bandwidth 1000000 ip address 100.100.100.1 255.255.255.0 qos lr outbound cir 1000000 cbs 19375000 # rip 1 undo summary network 0.0.0.0 import-route static # vd Root id 1 # zone name Management id 0 priority 100 import interface GigabitEthernet0/0 zone name Local id 1 priority 100 zone name Trust id 2 priority 85 import interface GigabitEthernet0/2 import interface GigabitEthernet0/4 zone name DMZ id 3 priority 50 zone name Untrust id 4 priority 5 import interface GigabitEthernet0/1 import interface GigabitEthernet0/3 zone name caiwu id 10 priority 1 switchto vd Root object network subnet 10.24.11.130/0.0.0.255 subnet 10.24.11.130 0.0.0.255 zone name Management id 0 ip virtual-reassembly zone name Local id 1 ip virtual-reassembly zone name Trust id 2 ip virtual-reassembly zone name DMZ id 3 ip virtual-reassembly zone name Untrust id 4 ip virtual-reassembly zone name caiwu id 10 ip virtual-reassembly interzone source Untrust destination Trust rule 0 permit source-ip any_address destination-ip 10.24.11.130/0.0.0.255 service any_service # ip route-static 0.0.0.0 0.0.0.0 117.172.146.1 ip route-static 10.24.10.0 255.255.255.0 100.100.100.2 ip route-static 10.24.11.0 255.255.255.0 100.100.100.2 ip route-static 10.24.11.18 255.255.255.255 100.100.100.2 ip route-static 10.24.11.100 255.255.255.255 100.100.100.2 ip route-static 10.24.11.130 255.255.255.255 100.100.100.2 ip route-static 10.24.11.131 255.255.255.255 100.100.100.2 ip route-static 10.24.11.132 255.255.255.255 100.100.100.2 ip route-static 10.24.11.161 255.255.255.255 100.100.100.2 ip route-static 10.24.12.0 255.255.255.0 100.100.100.6 ip route-static 10.24.60.0 255.255.255.0 100.100.100.2 # ntp-service refclock-master # ssh server enable # ip https enable # load xml-configuration # load tr069-configuration # user-interface con 0 user-interface vty 0 4 acl 2006 inbound authentication-mode scheme # return

这个域安全策略是放通的 映射的是8084跟5000两个端口

内网测试一下服务器这两个端口是不是开放的