As shown in Figure 11-7, the USG is configured with the NAT server. The HTTP server with internal address 10.2.1.2 is mapped to port 80 on 184.108.40.206 of the external network.
The PC at IP address 220.127.116.11 cannot access the HTTP server at IP address 18.104.22.168.
The internal server cannot ping through internal interface 10.2.1.1 of the NAT gateway but the NAT gateway can ping through the external PC 22.214.171.124. Therefore, the route on the internal server may be set incorrectly.
In this case, the NAT server may be configured incorrectly. Check the configuration of the NAT server:
nat server protocol tcp global 126.96.36.199 www inside 10.2.0.6 www
The preceding display shows that the configuration is incorrect. Modify it as follows:
nat server protocol tcp global 188.8.131.52 www inside 10.2.1.2 www
Through this case, you can conclude the following: