asa5512端口映射问题[asa版本8.6]

[inbucus]

工作需要把工作机的10086端口通过outside口公网ip映射出去，之前接触的都是8.3以前的设备，没写过新的。照着手册和网上的文章添加了如下的命令，可是访问不通。
interface GigabitEthernet0/0
nameif outside
security-level 0
ip address 210.76.A.X 255.255.255.224
interface GigabitEthernet0/1
nameif inside
security-level 100
ip address 192.168.172.1 255.255.255.0
bject network web-172
host 192.168.172.163
nat (Inside,Outside) static interface service tcp 10086 10086
access-list out-web permit tcp any host 192.168.172.163 eq 10086
access-group out-web in int Outside
show xlate后显示已经映射成功了
TCP PAT from inside:192.168.172.163 10086-10086 to outside:210.76.A.X 10086-10086
flags sr idle 0:00:49 timeout 0:00:00
如果不映射端口，直接把163的ip映射成其它公网ip（公司有1个多余的公网ip）出去就没问题，请教一下这是为什么？需要怎么更改才能将163的端口成功映射到公网ip上？
如果按照下面，将163ip映射为210.76.A.Y就没问题，可以从外网通过10086端口访问内网163机器。
object network mstsc-out
host 210.76.A.Y
object network mstsc-in
nat (inside,outside) static mstsc-out

[one-time]

感谢您的提问！稍后会有小伙伴为您解答的！

[wenwen ji]

object network hphost-22
host 192.168.1.44
nat (inside,outside2) static interface service tcp 8022 8022 //私有地址映射公网接口地址的端口.
还要写策略。
access-list out-in extended permit ip any host 192.168.1.44 //放开外部访问你的私有地址

[YilinChen]

配置范例：
/30 公网IP下,端口映射+PAT
object network WWW
host 192.168.2.2
nat (inside,outside) static interface service tcp www www
object network INSIDE
range 192.168.2.3 192.168.2.254
nat (inside,outside) dynamic interface
access-list WWW extended permit tcp any host 192.168.2.2 eq www
access-group WWW in interface outside