interface e0 auto
interface e1 auto

nameif e0 outside security0
nameif e1 inside security100

ip address outside 192.168.2.2 255.255.255.0
ip address inside 192.168.1.1 255.255.255.0

route outside 0.0.0.0 0.0.0.0 192.168.2.1

access-list 100 permit ip any any
access-list 101 permit tcp any host 192.168.2.99 eq 3389

access-group 100 in interface inside
access-group 101 in interface outside

static (inside,outside) 192.168.2.99 192.168.1.99 netmask 255.255.255.255

global (outside) 1 192.168.2.3 netmask 255.255.255.0

nat (inside) 1 0.0.0.0 0.0.0.0