The short story is you can’t establish a mapping through a NAT firewall for either the ping or tracert commands. This is because ping generates an ICMP echo request packet. ICMP is a protocol that uses IP (Internet Prototol) that implements “control messages” (flow control, routing, etc.) and it does not use “ports“.
Tracert uses a series of pings, so it can’t be mapped either.
TCP and UDP are other protocols that use IP, but they do use ports, and can have mappings set up through a firewall.