Unable to Ping/Access from a Local Host to Public IP of another Host

[thedao]

Hi everyone,

I'm using ASA Cisco 5520 with 2 interfaces: inside (172.16.10.x) and outside (119.202.193.80/28)
My Local Host IP is 172.16.10.200 can not Ping or Access to the Public IP (119.202.193.87) of Host 172.16.10.100, but can Ping/Access the Internet with no problem.
Clients outside the Internet can Ping/Access successfully to the Public IP (119.202.193.87) of Host 172.16.10.100 with no problem
Please show me how to do with ASDM ver 6.4, ASA ver 8.3(2) or this is can not be done by Cisco rule?
Thanks all

[Flavio Miranda]

Hi

 What is this devices  (119.202.193.87) of Host 172.16.10.100 ?  Does it has route to return the traffic to 172.16.10.200

 If it has, then you need add rule on ASA

access-list xxx extended permit icmp 172.16.10.0 255.255.255.0 host 119.202.193.87

access-group xxx out interface OUTSIDE

access-group xxx out interface INSIDE

access-group xxx in interface INSIDE

[thedao]

Hi friend,
Public IP (119.202.193.87) of Host 172.16.10.100 is a Web Server. I don't know what your mean 'Does it has route to return the traffic to 172.16.10.200? How I can do it? Is it NAT rule apply for both inside to outside and outside to inside? I attached the Routing image please take a look.
Thank Flavio Miranda a lot for helping me !!!

[Flavio Miranda]

Hi

"Does it has route to return the traffic to 172.16.10.200? How I can do it?"

As a server it need to have default gateway configured on it. No route is necessary

"Is it NAT rule apply for both inside to outside and outside to inside?"

It can be but not necessarillyI.  Usually we apply from inside to outside. You need outside to inside only if you want access your internal network from the internet.

"I attached the Routing image please take a look."

The attach did not load. Please add it again.

[MHM Cisco World · Accepted solution]

you need hairpin NATing 
Solved: Hairpin NAT ASA5506-X version 9.8 - Cisco Community

[thedao]

Thanks. This is WORK for me. But with the Ping command it shows as below, is it normal with (DIFFERENT ADDRESS!) alert? 

PING119.202.193.87 (119.202.193.87) 56(84) bytes of data.
64 bytes from172.16.10.100: icmp_seq=1 ttl=64 time=0.343 ms (DIFFERENT ADDRESS!)

[MHM Cisco World]

it work but ping failed can you more elaborate.
thanks 
MHM