华为路由器AR28-11如何添加端口映射3389 和8080到内网192.168.1.10？

ISP好像连了两家用户，我的内网是 192.168.1.0，外网地址123.255.20.161。 同时想问e0/0和e0/1哪个是外网接口？。 192.168.11.4是另一家用户吗？

<Quidway>dis cur #显示当前配置
#
sysname Quidway
#
super password level 3 cipher +Q372D_*-N[Q=^Q`Mbd4<1!!
#
FTP server enable
#
cpu-usage cycle 1min
#
nat address-group 1 123.255.20.162 123.255.20.162
#
web set-package force flash:/http.zip
#
radius scheme system
#
domain system
#
local-user admin
password simple ********
service-type telnet terminal
level 3
service-type ftp
#
dhcp server ip-pool aaa #DHCP 地址池
network 192.168.1.0 mask 255.255.255.0
gateway-list 192.168.1.1 #内网网关地址
dns-list 202.106.0.20 202.106.196.115
#
acl number 2000 match-order auto
rule 0 permit source 192.168.1.0 0.0.0.255
#
interface Aux0
async mode flow
#
interface Ethernet0/0
ip address 192.168.11.4 255.255.255.240
nat outbound 2000 address-group 1
#
interface Ethernet0/1 #接口上配置了内外两个IP地址？
ip address 192.168.1.1 255.255.255.0
ip address 123.255.20.161 255.255.255.224 sub
#
interface Serial0/0
clock DTECLK1
link-protocol ppp
ip address dhcp-alloc
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 192.168.11.1 preference 60 #配置连接外网上层交换机的静态路由？
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
set authentication password cipher +Q373D_*-N[Q=^Q`Mbd4<1!!
#
return
<Quidway>