NAT 0 with ACL

[getmedrew]

Hi guys.

I have a configuration like this

nat (ins) 1 int

Nat (ins) 0 acl nonat

and also

acl nonat permit ip from lan 1 to lan 2

The question is that this scenario does not work. I mean the pix will translate the inside host that goes to lan 2 to the interface outside ip address for some reason. I am using pix 6.3.3. I have cleared the xlate table and still the pix will do the translation when syntactically is correct not to translate.

Can someone share if there is a caveat on the OS itself? Like I said I have double-checked the syntax statements and they all seem to be correct...

Thanks for your help

[fedrodri]

Drew,

Get us the config so we can double check it for you. If you have the config as you mentionned, it should be working for traffic matching the criterias on ACL nonat... Did you try a 'clear local' as well? I've heard of no caveats for these kind of problems. Do a 'clear xlate' and 'clear local' and then do a 'show local ip-on-lan1'... It would be OK to get translated to the outside interface, if any of the connections shown are matching the criterias on ACL nonat. I would like to take a look at that 'show local', if you could post it as well, that'll be great.

A pleasure, my friend!

Federico Rodriguez