Yes i'm making ping from my router directly connected to customer.ACLis configured on client my router there is no ACL.Okay let try the above configs you gave.

are you using VRF under the interface facing to the client?

No VRF on interface its just a subinterface.

do you see the mac address of the neighbor interface with ARP from your router? I think you already remove the ACL and the same history, right?

are you trying to ping the ip 10.10.10.1? or what is the destination? , what is the IP under the client interface?

Is possible to know the configuration of your interface and interface on the client side?

ip nat inside source static tcp 192.168.0.5 25 10.10.10.1 25 worked. after reloading the router.

Thanks guys

Thank you for the update.

You should not have needed a reload just a clearing of the translation but glad to hear it is working.

Jon

Yeah, i tried clearing translation returned an error. so ended up reloading

I am not sure if you have control over the remote router but they might have an access list configured on the wan interface that blocks icmp. We have the same set up and for testing we have to remove the ACL so the isp router can ping our outside address.

i have control on the remote router i manage it. ACL which is there is

access-list 110 permit tcp any host 10.10.10.1 eq smtp
access-list 110 permit tcp any any
access-list 110 permit ip any any

Thanks for your reply. Can you create an access list with NATed address as the source and remote router's wan address, and then debug the access list on remote router? you can try this on both sides to confirm if icmp packets are even reaching to the end point. You may have already tried this.

ok will get back let me ceate ACL as you suggests

ACL should be permit icmp or permit ip