Intranet users access the public IP address of the intranet server fail after configure NAT server.

Intranet users access the public IP address of the intranet server fail after configure NAT server. And internet users can access the public IP address of the intranet server successfully.

1.Checking the configuration on the USG9500.

NAT server configuration:

#

nat server test1 zone untrust protocol tcp global 1.1.1.1 www inside 192.168.1.1 83 no-reverse unr-route

nat server test2 protocol icmp global 1.1.1.1 inside 1192.168.1.1 no-reverse unr-route

#

Source NAT configuration:

nat server test1 zone untrust protocol tcp global 1.1.1.1 www inside 192.168.1.1 83 no-reverse unr-route

nat server test2 protocol icmp global 1.1.1.1 inside 1192.168.1.1 no-reverse unr-route

As ping work successfully, only web service not work, compare the NAT server configuration, the www service limit the source zone to untrust. After delete the source zone, www service work.

nat server test1  protocol tcp global 1.1.1.1 www inside 192.168.1.1 83 no-reverse unr-route   ///delete source zone.