I have some challenges with below setup kindly provide your valuable inputs to get going with the same
Zone Name - Untrust Eth0/0
Zone Name - Trust Eth0/3 & below are configure as sub interfaces
Vlan 100 - 192.168.1.1/24 and i have device on LAN i.e. 192.168.1.254/24 on Core Switch
Vlan 105 - 192.168.2.1/24
Zone Name - Connector Eth0/5 on SSG5
ip : 192.168.3.1/24 on SSG5 and
ip : 192.168.3.2/24 on router connecting to SSG5 on Eth0/5
and on router LAN i have a device with ip 192.168.4.254/24
Goal : Reachability between 192.168.1.254 and 192.168.4.254 but via 192.168.2.1 i.e. when i try to reach from 192.168.1.254 it should reach 192.168.4.254 as 192.168.2.2 and when 192.168.4.254 tries to reach 192.168.2.2 it should then NAT to 192.168.1.254
in short NAT should work from 192.168.1.254 to 192.168.2.2 for outgoing traffic and 192.168.2.2 NATed to 192.168.1.254 for incoming traffic
The Routes are in place on both ends on End Router & also in SSG5 the only thing that is not happening is communication between 192.168.4.254 & 192.168.2.2(Actually 192.168.1.254) & 192.168.1.254(Actually 192.168.2.2) & 192.168.4.254.
What happens if you try to ping between the real IP addresses: 192.168.4.254 and 192.168.1.254? Does it work (assuming you have the routes configured as well)? Im just trying to isolate any other issues in between.
I can see that you have IP address 192.168.2.1 configured on the SSG's eth0/3 interface. Unless you are using it for a different purpose, it is not necessary for these communications. Can you delete it?