ASA policy-nat is working but acl is not hit

[sok_senmonorom]

Hope you guys can help explain why is it working this strange. Thank you.

access-list NET1 permit ip host 10.1.2.27 10.76.5.0 255.255.255.224

static (inside,outside) 192.168.100.100 access-list NET1

ciscoasa(config)# show access-list

access-list NET1 line 1 extended permit ip host 10.1.2.27 10.76.5.0 255.255.255.224 (hitcnt=0) 0x19580e75

ciscoasa(config)# show xlate

3 in use, 4 most used

Global 192.168.100.100 Local 10.1.2.27

...

ciscoasa(config)# show nat

NAT policies on Interface inside:

  match ip inside 10.1.2.27 255.255.255.255 outside 10.76.5.0 255.255.255.224

    static translation to 192.168.100.100

    translate_hits = 9, untranslate_hits = 28

[Tarik Admani]

Hi,

It seems as if this is the behavior with access lists that are associated with NAT. I did a few checks around the support forums and found that this could be the issue and there isnt anything to worry about. However if you can move this thread to the firewalling community I am sure they will be able to confirm this for you.

Tarik Admani
*Please rate helpful posts*