no nat-control

[yuhuiyao]

I had no nat-control on ASA, what I think is the ASA will allow traffic to traverse different interfaces as long as ACL permit it. No nat needed at all. However, when I tried to ping from outside to inside, ping failed and I found these debug information on the ASA:

No translation group found for icmp src...

Anyone know why?

Thanks,

[andrew.prince]

You will be using RFC1918 internal IP addresses that will not route on the internet.

HTH>