Difference : Identity NAT and Nat exemption - PIX/ASA

From: Vladimir Sousa (vladrac@gmail.com)
Date: Mon Feb 16 2009 - 20:55:03 ARST


Hello Everyone,

What is the real difference between Identity Nat and Nat exemption?

Identity Nat: nat (interface) 0 ip mask
Nat exempt : nat (interface) 0 access-list

when using nat-control
the first one creates on NAT that translate IPs to the same IPs
the second doesnt create any nat translation, but permit access to the IPs
on the ACL

So, what the real difference and what are the cases to use one or the other?

Vlad CCIE R&S 19718

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:44:11 ARST