Everyone a great god,

I do NAT in FMC, in order to test, open access policy inside and outside and NAT anyip through exports (subinterface VLAN499/10.109.99 x) connected to the terminal network,

My demand is vlan55 can visit each other's jumpserver, 135.135.135. X/24

Our topology is very simple, FMC bottom allied core, core bottom allied gathering, gathering bottom allied access, then the terminal,

FMC: anyip vlan499-10.109.99.4/24 out; And made a return to our network vlan50 segment (management) & amp; Vlan55 (target segment) routing
Core: the default route to point to to the FMC (192.168.50.254) inside the mouth, all of the gateway network segment on the core switches (55.1 & amp; 50.1); IP routing
Together: the default routing refers to 50.1; IP routing.

Now it is
Terminal can ping to FMC inside the mouth;
On the core with 55.1 can ping to jumpserver source;
From 50. The x terminal can ping to jumpserver
But from 55. X terminal to be able to ping directly jump server,

Feeling is routing which part out of the question, but block and can ping,

Ever have thought the great god of analyze, thank you