Cisco 866 Port Weiterleitung funktionert nicht

Question

eHallo hab ein Problem mit meinen Cisco 866VAE-K9.
Leider funktioniert die Port weiterleitung nicht. der Zugang zu VDsl und alles weiter funktioniert top. blos leider didba Port Weiterleitung.  Ich hoffe es kann mir einer Helfen.
Hier ist meine Config:
Building configuration...
Current configuration : 9016 bytes
! Last configuration change at 23:30:14 UTC Mon Jan 6 2014 by <user>!
version 15.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname deMUC-WAN-01
boot-start-marker
boot-end-marker
aqm-register-fnf
logging buffered 51200 warnings
no aaa new-model
wan mode dsl
ip dhcp excluded-address 10.10.10.1
ip dhcp pool ccp-pool
import all
network 10.10.10.0 255.255.255.248
default-router 10.10.10.1
lease 0 2
ip domain name <meineDomain>
ip name-server 8.8.8.8
ip name-server 8.8.4.4
ip cef
no ipv6 cef
crypto pki trustpoint TP-self-signed-711588964
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-711588964
revocation-check none
rsakeypair TP-self-signed-711588964
crypto pki trustpoint test_trustpoint_config_created_for_sdm
subject-name [email protected]
revocation-check crl
crypto pki certificate chain TP-self-signed-711588964
certificate self-signed 01
<cert>
   quit
crypto pki certificate chain test_trustpoint_config_created_for_sdm
username <user> privilege 15 password 0 <pw>
controller VDSL 0
operating mode vdsl2
no cdp run
no ip ftp passive
class-map type inspect match-any ccp-skinny-inspect
match protocol skinny
class-map type inspect match-any http
match protocol http
match protocol https
class-map type inspect match-any orga
match protocol https
match protocol http
class-map type inspect match-any Server
match protocol http
match protocol https
class-map type inspect match-any ccp-h323nxg-inspect
match protocol h323-nxg
class-map type inspect match-any ccp-cls-icmp-access
match protocol icmp
match protocol tcp
match protocol udp
class-map type inspect match-any ccp-h225ras-inspect
match protocol h225ras
class-map type inspect match-any ccp-h323annexe-inspect
match protocol h323-annexe
class-map type inspect match-any ccp-cls-insp-traffic
match protocol dns
match protocol ftp
match protocol https
match protocol icmp
match protocol imap
match protocol pop3
match protocol shell
match protocol realmedia
match protocol rtsp
match protocol smtp
match protocol sql-net
match protocol streamworks
match protocol tftp
match protocol vdolive
match protocol tcp
match protocol udp
match protocol http
class-map type inspect match-any ccp-h323-inspect
match protocol h323
class-map type inspect match-any http_port
match protocol http
match protocol https
class-map type inspect match-all ccp-invalid-src
match access-group 100
class-map type inspect match-any ccp-sip-inspect
match protocol sip
class-map type inspect match-all ccp-protocol-http
match protocol http
class-map type inspect match-all ccp-cls--1
match class-map http
match access-group name http
class-map type inspect match-all ccp-insp-traffic
match class-map ccp-cls-insp-traffic
class-map type inspect match-all ccp-icmp-access
match class-map ccp-cls-icmp-access
policy-map type inspect ccp-policy-http
class type inspect http
  inspect
class class-default
  drop
policy-map type inspect ccp-inspect
class type inspect ccp-invalid-src
  drop log
class type inspect ccp-protocol-http
  inspect
class type inspect ccp-insp-traffic
  inspect
class type inspect ccp-sip-inspect
  inspect
class type inspect ccp-h323-inspect
  inspect
class type inspect ccp-h323annexe-inspect
  inspect
class type inspect ccp-h225ras-inspect
  inspect
class type inspect ccp-h323nxg-inspect
  inspect
class type inspect ccp-skinny-inspect
  inspect
class class-default
  drop
policy-map type inspect ccp-policy-Server
class type inspect Server
  inspect
policy-map type inspect ccp-permit
class type inspect ccp-sip-inspect
  inspect
class type inspect ccp-h323-inspect
  inspect
class type inspect ccp-h323annexe-inspect
  inspect
class type inspect ccp-h225ras-inspect
  inspect
class type inspect ccp-h323nxg-inspect
  inspect
class type inspect ccp-skinny-inspect
  inspect
class class-default
  drop
policy-map type inspect ccp-permit-icmpreply
class type inspect ccp-icmp-access
  inspect
class type inspect ccp-sip-inspect
  inspect
class type inspect ccp-h323-inspect
  inspect
class type inspect ccp-h323annexe-inspect
  inspect
class type inspect ccp-h225ras-inspect
  inspect
class type inspect ccp-h323nxg-inspect
  inspect
class type inspect ccp-skinny-inspect
  inspect
class class-default
  pass
zone security in-zone
zone security out-zone
zone-pair security ccp-zp-self-out source self destination out-zone
service-policy type inspect ccp-permit-icmpreply
zone-pair security ccp-zp-in-out source in-zone destination out-zone
service-policy type inspect ccp-inspect
zone-pair security ccp-zp-out-self source out-zone destination self
service-policy type inspect ccp-permit
zone-pair security sdm-zp-out-zone-in-zone source out-zone destination in-zone
service-policy type inspect ccp-policy-http
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
interface Ethernet0
no ip address
no ip route-cache
interface Ethernet0.7
description $ETH-WAN$
encapsulation dot1Q 7
no ip route-cache
pppoe-client dial-pool-number 1
no cdp enable
interface FastEthernet0
no ip address
interface FastEthernet1
switchport access vlan 100
no ip address
interface FastEthernet2
switchport access vlan 100
no ip address
interface FastEthernet3
switchport access vlan 100
no ip address
interface GigabitEthernet0
switchport access vlan 2
no ip address
interface GigabitEthernet1
no ip address
shutdown
duplex auto
speed auto
interface Vlan1
description $ETH_LAN$$FW_INSIDE$
ip address 10.10.10.1 255.255.255.248
ip nat inside
ip virtual-reassembly in
zone-member security in-zone
ip tcp adjust-mss 1412
interface Vlan2
description $FW_INSIDE$
ip address 10.3.1.250 255.255.255.0
ip nat inside
ip virtual-reassembly in
zone-member security in-zone
interface Vlan100
description $FW_INSIDE$
ip address 10.30.1.2 255.255.255.0
ip nat inside
ip virtual-reassembly in
zone-member security in-zone
interface Dialer0
description $FW_OUTSIDE$
ip address negotiated
ip mtu 1452
ip nat outside
ip virtual-reassembly in
zone-member security out-zone
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname <user>
ppp chap password 0 <pw>
ppp pap sent-username <user> password 0 <pw>
ppp ipcp mask request
ppp ipcp route default
no cdp enable
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 10.30.1.4 80 interface Dialer0 80
ip access-list extended Server
remark CCP_ACL Category=2
permit tcp any eq www any eq www
dialer-list 1 protocol ip permit
mac-address-table aging-time 10
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark CCP_ACL Category=2
access-list 1 permit 10.10.10.0 0.0.0.7
access-list 1 permit 10.3.1.0 0.0.0.255
access-list 1 permit 10.30.1.0 0.0.0.255
access-list 23 permit 10.10.10.0 0.0.0.7
access-list 23 permit 10.3.1.0 0.0.0.255
access-list 100 remark CCP_ACL Category=128
access-list 100 permit ip host 255.255.255.255 any
access-list 100 permit ip 127.0.0.0 0.255.255.255 any
line con 0
login local
no modem enable
line aux 0
line vty 0 4
access-class 23 in
privilege level 15
login local
transport input telnet ssh
scheduler allocate 60000 1000
end

Answer 1