As shown in Figure 11-7, the USG is configured with the NAT server. The HTTP server with internal address 10.2.1.2 is mapped to port 80 on 126.96.36.199 of the external network.
The PC at IP address 188.8.131.52 cannot access the HTTP server at IP address 184.108.40.206.
The internal server cannot ping through internal interface 10.2.1.1 of the NAT gateway but the NAT gateway can ping through the external PC 220.127.116.11. Therefore, the route on the internal server may be set incorrectly.
In this case, the NAT server may be configured incorrectly. Check the configuration of the NAT server:
nat server protocol tcp global 18.104.22.168 www inside 10.2.0.6 www
The preceding display shows that the configuration is incorrect. Modify it as follows:
nat server protocol tcp global 22.214.171.124 www inside 10.2.1.2 www
Through this case, you can conclude the following: