pix 501 static 不通问题

jerryfu

ip address outside 60.191.x.54 255.255.255.248\r\nip address inside 172.16.10.1 255.255.255.0\r\n\r\naccess-list acl_out permit icmp any any \r\naccess-list acl_out permit tcp any host 60.191.x.50 eq https \r\naccess-list acl_out permit tcp any host 60.191.x.50 eq domain \r\naccess-list acl_out permit tcp any host 60.191.x.50 eq smtp \r\naccess-list acl_out permit tcp any host 60.191.x.50 eq pop3 \r\naccess-list acl_out permit tcp any host 60.191.x.50 eq ident \r\n\r\nnat (inside) 1 0.0.0.0 0.0.0.0 0 0\r\nstatic (inside,outside) 60.191.x.50 172.16.10.21 netmask 255.255.255.255 0 0 \r\naccess-group acl_out in interface outside\r\nroute outside 0.0.0.0 0.0.0.0 60.191.x.49 1\r\n其他配置都是基本配置，就是这几句关于静态nat。在pix上ping inside ，outside 都没问题。可就是ping不通这个映射的公网地址。而且打开的端口也全部访问不到。\r\npix为pix 501，pix os 6.3\r\n大家帮我看看可能是什么问题。

qintel

你做NAT地址池了吗？\r\n还有外网IP对内网IP的映射?