On PIX 515E I need access from a real IP x.x.x.x (outside interface) to inside IP 10.1.1.2 (inside interface) without NAT - for test purposes.
When I try to access from the real IP x.x.x.x inside IP 10.1.1.2 PIX sends error messages to syslog: (305005) "No translation group found for icmp src OUT:x.x.x.x dst IN:10.1.1.2 (type 8, code 0)".
I tried 2 configs:
1. access-list nonat_toInside extended permit ip host x.x.x.x 10.1.1.0 255.255.255.0
nat (OUT) 0 access-list nonat_toInside
2. static (OUT,IN) 10.1.1.2 10.1.1.2 netmask 255.255.255.255
But nothing helped... May be there are mistakes? Or what should I do to solve the problem?