NAT Exemption And Identity NAT

[rajeshcv49]

Can any pleas tell me what is  difference between NAT Exemption and Identity nat,

[Marvin Rhoads · Accepted solution]

NAT exemption is the old term (pre-ASA 8.3) for the same thing as what is currently known as Identity NAT.

The term changed to be descriptive of the 8.3+ syntax and configuration method.

[rajeshcv49]

thank you Marvin Rhoads,

[Karsten Iwen]

Just to add on Marvins answer: With ASA versions before 8.3, there was both identity NAT and NAT exemption which caused much confusion because they were very often named wrong. On the old versions nearly always NAT exemption was used, which is the nat-command together with an ACL to control which traffic shouldn't be address-translated. Identity NAT did the same, but without the ACL which nearly always was not flexible enough to be useful.