Here's what we'd like to do.
There's 3 contexts. when context1 communicates with context3, it uses it's private IP address (there's no nat).
when context2 communicates with context3, it uses it's Public IP address (it's natted).
we used static with ACL for that.
we can access public IP address of context3 from context2.
we can also access private IP address of context3 from context1.
Our problem is that it seems context3 uses its private IP address when responding to context1. it should also respond with its IP public address.
Here attached our config.