Network Access Through Internet-side Port 80, 8080, or 443 Fails.
Internet-side ports 80, 8080, and 443 are disabled by a carrier. If Internet-side port 80, 8080, or 443 is enabled in NAT, users cannot access the intranet.
In the following example, Internet-side port 80 is configured as a NAT static.
[Huawei-GigabitEthernet1/0/0] nat static protocol tcp global 10.10.10.1 80 inside 192.168.2.10 80
When devices on another network access the intranet, intranet port 80 is mapped to Internet-side port 80, causing an access failure. To resolve this problem, change the mapped Internet-side port to a port except ports 8080 and 443. For example, change it to port 1001.
[Huawei-GigabitEthernet1/0/0] nat static protocol tcp global 10.10.10.1 1001 inside 192.168.2.10 80