Hello,
You would use this type of NAT (Identity NAT) when you want to traffic from your inside interface to flow through to your outside interface without changing the address. An example scenario would be a private MPLS cloud with separate clients. Each client has a unique address space so NATing is not necessary. Using Identity NAT is the solution because it provides us with the privacy of only allowing inside hosts to initiate communication with outside hosts.
This is when your outside its a private range as well, if it is public you use regular PAT with the outside interface or any public IP:
object network ALL_ZEROS
subnet 0.0.0.0 0.0.0.0
nat (inside,outside) dynamic interface
On very specific/rare circumstances you want to use this NAT.
Regards,
Juan Lombana
Please rate helpful posts.
