As shown in Figure 11-7, the USG is configured with the NAT server. The HTTP server with internal address 10.2.1.2 is mapped to port 80 on 220.127.116.11 of the external network.
The PC at IP address 18.104.22.168 cannot access the HTTP server at IP address 22.214.171.124.
The internal server cannot ping through internal interface 10.2.1.1 of the NAT gateway but the NAT gateway can ping through the external PC 126.96.36.199. Therefore, the route on the internal server may be set incorrectly.
In this case, the NAT server may be configured incorrectly. Check the configuration of the NAT server:
nat server protocol tcp global 188.8.131.52 www inside 10.2.0.6 www
The preceding display shows that the configuration is incorrect. Modify it as follows:
nat server protocol tcp global 184.108.40.206 www inside 10.2.1.2 www
Through this case, you can conclude the following: