Can't communication from HQ to Natted LAN host

[bfpnetadmin]

Hi all.

I have a remote branch that needs to be able to access a phone switch at 192.168.50.15 and 192.168.50.16 from the 172.17.0.0/16 and 172.16.0.0 network at our HQ.


interface Loopback1
ip address 1.1.1.1 255.255.255.252
ip nat inside source static tcp 192.168.50.15 35300 public ip 35300 extendable
ip nat inside source static tcp 192.168.50.16 10000 public ip 10000 extendable
ip nat inside source static udp 192.168.50.15 35300 public ip 35300 extendable
ip nat inside source static udp 192.168.50.16 10000 public ip 10000 extendable
access-list 199 permit ip host 192.168.50.15 172.17.0.0 0.0.255.255
access-list 199 permit ip host 192.168.50.16 172.17.0.0 0.0.255.255
route-map Test permit 10
match ip address 199
set ip next-hop 1.1.1.1

From HQ from a pc with ip of 172.17.2.1, I cannot access either switch ...but from HQ using the public ip address, I can connect.

Above is the router config for the branch.

Any ideas?

 

[jeter]

draw a diagram of your network with ip acheme.

We need to discover how this looks before assisting correctly...





SPC NVARNG
Tek-TIP Member 19,650