PIX515E，做PAT，做端口映射失败

公网地址只有一个，是不是不能做端口映射啊。。。
具体配置：
pix515e# show running-config
: Saved
6 e4 Y7 N- l# w* Y6 v:
$ a2 J9 P" q6 ]) @4 o3 [8 k7 oPIX Version 7.2(2)
; C) K; v/ P% d!
hostname pix515e
9 B9 I+ i: ?- mdomain-name Bluesv
enable password loy3NqktgLcFhFa5 encrypted
names
' V- k# H8 X- Y$ |!
6 }1 j4 r% ?1 H* k( H; Ninterface Ethernet0
( b, x$ q+ \* a, |9 h speed 100
duplex full
8 o. F; Q6 x9 o nameif outside
  m% {+ I4 B/ o  Z8 ^ security-level 0
ip address 222.92.2.74 255.255.255.252
!
interface Ethernet1
speed 100
duplex full
) c+ h# S; t; h nameif inside
* Q2 h- ]! ^  u" C5 q security-level 100
ip address 192.168.1.1 255.255.255.0
+ X# o6 E$ A: S/ I, \' z!
passwd 2KFQnbNIdI.2KYOU encrypted
7 m0 G) z3 Z5 Y; x& ^8 w- G& n. w# aftp mode passive
+ _$ L3 d1 y$ r) _! ^5 x  Ndns server-group DefaultDNS
domain-name Bluesv
  K; E5 b3 \* Waccess-list outside_cryptomap extended permit ip any 192.168.1.192 255.255.255.192
3 _; q6 O/ T5 c7 z% p: o5 yaccess-list 101 extended permit tcp any interface outside eq https
2 C3 U9 Z. s+ B0 M. I. g: Apager lines 24
: L5 R  A7 w7 q. b/ xmtu outside 1500
9 R1 `' y6 \7 S: pmtu inside 1500
ip local pool Bluesv 192.168.1.210-192.168.1.230 mask 255.255.255.0
3 S. u: M8 ^) O2 u/ [( \# z( uno failover
icmp unreachable rate-limit 1 burst-size 1
asdm image flash:/asdm521.bin
no asdm history enable
. X* I, r. u8 R. l2 zarp timeout 14400
( @0 C& m) z: X8 M8 B9 n, h1 Zglobal (outside) 1 interface
nat (inside) 1 192.168.1.0 255.255.255.0
) V+ i. S6 w; ^6 r; wstatic (inside,outside) 222.92.2.74 192.168.1.8 netmask 255.255.255.255
access-group 101 in interface outside
0 ~3 Q& z2 y8 {5 _, croute outside 0.0.0.0 0.0.0.0 222.92.2.74 1
, f- P1 S% {1 y+ Etimeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
" U( `2 E9 K3 o/ B# htimeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
% ]3 p% @% r) Z9 Mgroup-policy test internal
group-policy test attributes
6 {6 _6 O2 U+ N& S  ` dns-server value 61.177.7.1
% r% V4 P" P' V! R* w) p2 O vpn-tunnel-protocol IPSec
username admin password AnfkgrVQ2P4TDrCt encrypted privilege 15
username wangzx password kDSRrtOzFfH2I3Eb encrypted privilege 0
username wangzx attributes
; {5 I1 S( t3 k8 c* t; f vpn-group-policy test
. o9 Z2 d4 u% r+ V- I0 g; faaa authentication telnet console LOCAL
4 K5 ^! D- a; |. o7 W$ {& l: N) shttp server enable
3 Y. c+ ~: K9 q6 shttp 0.0.0.0 0.0.0.0 inside
no snmp-server location
/ z$ o$ {/ W6 U! C! j4 o. Ano snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
. R- h# K6 o2 u5 G( P0 ccrypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA
# o6 {" \1 G  s( i" Jcrypto map outside_map 20 ipsec-isakmp dynamic outside_dyn_map
crypto map outside_map interface outside
& x1 T$ \5 B/ l9 X3 }# ]crypto isakmp enable outside
crypto isakmp policy 50
authentication pre-share
encryption des
/ Z2 H8 I$ z# m# B6 ?  } hash sha
group 1
lifetime 86400
: a8 L6 k  P& H0 d7 B& K& `crypto isakmp policy 80
authentication rsa-sig
& @6 m5 Z* x* A5 y4 l& R5 E. z encryption des
hash sha
, @8 z& V( o- ^) _8 T0 x+ l: _ group 1
- S0 ]7 o. E/ Y  k% \9 @ lifetime 86400
crypto isakmp policy 100
; b1 a; Q. @+ f# [/ ] authentication crack
6 Q0 a9 \, s# p: @9 s# I$ y encryption 3des
# d( b; r7 X9 z6 q1 ]* Q' e) f hash sha
group 2
/ J6 R1 _' ?, P4 c lifetime 86400
tunnel-group test type ipsec-ra
  [/ ~! ?6 u9 `7 V. qtunnel-group test general-attributes
( v" i1 C' C% M6 V' G4 K address-pool Bluesv
+ t) l4 H& z+ o: g default-group-policy test
telnet 192.168.1.0 255.255.255.0 inside
telnet timeout 5
& A0 [4 Q- T4 U' V) n  [ssh timeout 5
console timeout 0
# v) \$ @9 @& b!
class-map inspection_default
+ L! K3 D) K! ]9 z8 Q match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
7 ]" q# d' [2 v' m parameters
- _2 I5 t$ L6 Y, T! m message-length maximum 512
policy-map global_policy
class inspection_default
* q! _. x2 W9 A& |) K9 z inspect dns preset_dns_map
$ R2 N* c+ M; D9 _$ z  j9 Q& ]- W4 @ inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
2 O6 |1 B2 B+ G0 j+ F inspect esmtp
7 S" E  f% Q- V& K inspect sqlnet
inspect skinny
% k- y- ^; f5 }  L# R inspect sunrpc
  n5 Y: Q2 Y  t inspect xdmcp
inspect sip
5 {/ V  B' g/ b; I& F% Q) ^ inspect netbios
% h! h9 x- Y- `0 s inspect tftp
!
service-policy global_policy global
prompt hostname context
& z6 {- W% `# c3 m# G& @5 |Cryptochecksum:acd736395b93796f3acea90762b0e59e
/ E5 \) \. G( y: end

看配置好像没什么问题

引用:                                                                                                                                作者: vpn007                                                                                                                                                                                                        static (inside,outside) 222.92.2.74 192.168.1.8 netmask 255.255.255.255                                                                                                                 楼主的端口映射的配置在哪呢？没看到啊？
- [% p, N. D+ R" M! O应该是想用上面这条命令做吧？怎么没配端口呢？

route outside 0.0.0.0 0.0.0.0 222.92.2.74 1 这个地址和你的接口地址一样？

不知该说些什么。。。。。。就是谢谢