Cisco ASA Series Cli Configuration Manual page 756

NAT in Routed and Transparent Mode
Identity NAT
You might have a NAT configuration in which you need to translate an IP address to itself. For example,
if you create a broad rule that applies NAT to every network, but want to exclude one network from NAT,
you can create a static NAT rule to translate an address to itself. Identity NAT is necessary for remote
access VPN, where you need to exempt the client traffic from NAT.
Figure 1-8
Figure 1-8
209.165.201.1
209.165.201.2
NAT in Routed and Transparent Mode
You can configure NAT in both routed and transparent firewall mode. This section describes typical
usage for each firewall mode and includes the following topics:
•
•
Cisco ASA Series CLI Configuration Guide
1-10
shows a typical identity NAT scenario.
Identity NAT
Security
Appliance
Inside Outside
NAT in Routed Mode, page 1-11
NAT in Transparent Mode, page 1-11
209.165.201.1
209.165.201.2
Chapter 1 Information About NAT