pc1 cannot connect to pc2, configured as follows

PC1-FW-PC2

PC-1(10.1.1.2), PC-2(1.1.1.2)
interface GigabitEthernet0/0/1
undo shutdown
ip address 10.1.1.1 255.255.255.0
#
interface GigabitEthernet0/0/2
undo shutdown
ip address 1.1.1.1 255.255.255.0
#
firewall zone trust
set priority 85
add interface GigabitEthernet0/0/1
#
firewall zone untrust
set priority 5
add interface GigabitEthernet0/0/2
#
ip route-static 0.0.0.0 0.0.0.0 1.1.1.254
#
nat address-group addressgroup1 0
mode no-pat global
route enable
section 0 1.1.1.10 1.1.1.15
# 
security-policy  
  rule name policy1 
    source-zone trust
    destination-zone untrust
    source-address 1.1.1.0 24 
    action permit
# 
nat-policy 
  rule name policy_nat1
    source-zone trust
    destination-zone untrust 
    source-address 10.1.1.0 24  
    destination-address 1.1.2.2 24
    action source-nat address-group addressgroup1 
  rule name policy_nat2
    source-zone trust
    destination-zone untrust 
    source-address 10.1.1.0 24 
    destination-address any
    action no-nat
#                                         
return