set service "RemoteDesktop" protocol tcp src-port 0-65535 dst-port 3389-3389

set interface untrust vip 61.144.230.45 + 3389 RemoteDesktop 192.168.3.114

set policy from untrust to trust any vip(61.144.230.45) RemoteDesktop permit

save