5505映射.doc

请教一个ASA5505端口映射的问题内网有一台服务器,只开启远程桌面和WEB服务,问题,我按照以下配置好了后,远程登录成功,但打不开内部服务器的网站,请帮忙看下,谢谢了E0 9 网关54内网服务器 50ASA5505(config)# show run: Saved:ASA Version 8.0(4)!hostname ASA5505enable password XejxZFfyt2wxqfff encryptedpasswd 2KFQnbNIdI.2KYOU encryptednames!interface Vlan1no nameifno security-levelno ip address!interface Vlan2nameif outsidesecurity-level 0ip address 9 !interface Vlan3nameif insidesecurity-level 100ip address !interface Ethernet0/0switchport access vlan 2!interface Ethernet0/1switchport access vlan 3!interface Ethernet0/2switchport access vlan 3!interface Ethernet0/3shutdown!interface Ethernet0/4shutdown!interface Ethernet0/5shutdown!interface Ethernet0/6shutdown!interface Ethernet0/7shutdown!ftp mode passiveaccess-list 101 extended permit tcp any host 9 eq 3389access-list 101 extended permit tcp any host 9 eq wwwaccess-list 101 extended permit ip any anyaccess-list 101 extended permit icmp any anypager lines 24mtu outside 1500mtu inside 1500icmp unreachable rate-limit 1 burst-size 1asdm image disk0:/asdm-61557.binno asdm history enablearp timeout 14400global (outside) 1 interfacenat (inside) 1 static (inside,outside) tcp interface 3389 50 3389 netmask 55static (inside,outside) tcp interface www 50 www netmask 55access-group 101 in interface outsideroute outside 54 1timeout xlate 3:00:00timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolutedynamic-access-policy-record DfltAccessPolicyno snmp-server locationno snmp-server contactsnmp-server enable traps snmp authentication linkup linkdown coldstartcrypto ipsec security-association lifetime seconds 28800crypto ipsec security-association lifetime kilobytes 4608000telnet timeout 5ssh timeout 5console timeout 0threat-detection basic-threatthreat-detection statistics access-listno threat-detection statistics tcp-intercept!class-map inspection_defaultmatch default-inspection-traffic!policy-map type inspect dns preset_dns_mapparameters message-length maximum 512policy-map global_policyclass inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect rsh inspect rtsp inspect esmtp inspect sqlnet inspect skinny inspect sunrpc inspect xdmcp inspect sip ins