what's the "no nat" mean?

[qingfeng-hu]

I dont need nat,so I use the no nat,but it not work,but even I use the nat (inside)0 0,I just can ping the other end,the other end can't ping back ,finally,the "nat (inside) 0 access-list acl-in" resolve this problem.

my question is:

what's the "no nat" and "nat (inside) 0 0 0" really mean?

thanks

[leeb · Accepted solution]

by defult the pix must do nat in order to get access from high security level to low. this is a problem if you are using public ip in your inside interface (for example) that don't need nat, and here comes the nat 0 commands ...