Dynamic NAT can be verified by Ping?

[Tang-Suan Tan]

Hi Jcarvaja and all :

I have problem to verify the Dynamic NAT by Ping. First of all, can Dynamic NAT verified by Ping?

Following is my configuration of Dymanic NAT from Inside to DMZ. (My Inside Network is 192.168.100.0/24 and dmz network is 192.168.50.0/24).

nat (inside) 20 192.168.100.0 255.255.255.0

global (dmz) 20 192.168.50.151-192.168.50.160

When I use a host at inside with IP 192.168.100.x to ping a host at dmz with 192.168.50.x, it always fails and the result is failed also in reverse direction: from dmz to inside.

Before these two command lines, hosts from both sides can ping each other.

Is it any way (by adding command or other commands) that can make ping to verify the Dynamic NAT? Or that is no way can verify Dynamic NAT by ping?

Thanks for your answer in advance!

Best regards,

tangsuan

[Tang-Suan Tan]

Hi Icambron :

Thanks for your reply!

I get what you mean that dynamic nat can not have the packet tracer pass from high security to low security site.

regards,

tangsuan