As shown in Figure 11-7, the USG is configured with the NAT server. The HTTP server with internal address 10.2.1.2 is mapped to port 80 on 22.214.171.124 of the external network.
The PC at IP address 126.96.36.199 cannot access the HTTP server at IP address 188.8.131.52.
The internal server cannot ping through internal interface 10.2.1.1 of the NAT gateway but the NAT gateway can ping through the external PC 184.108.40.206. Therefore, the route on the internal server may be set incorrectly.
In this case, the NAT server may be configured incorrectly. Check the configuration of the NAT server:
nat server protocol tcp global 220.127.116.11 www inside 10.2.0.6 www
The preceding display shows that the configuration is incorrect. Modify it as follows:
nat server protocol tcp global 18.104.22.168 www inside 10.2.1.2 www
Through this case, you can conclude the following: