| 9.2 |  | Network Address Translations |
| 9.2.6 |  | Identity NAT |

| Another feature to control outbound connections is the ability to control which internal IP addresses are visible on the outside. The nat 0 command lets administrators disable address translation so that inside IP addresses are visible on the outside without address translation. Use this feature when there is a globally registered IP address on the inside network that is desired to be accessible on the outside network. Use of nat 0 depends on the security policy. If the policy allows internal clients to have their IP addresses exposed to the Internet, then nat 0 is the process to provide that service.

In Figure , the address 192.168.0.9 is not translated. When the command

nat (inside) 0 192.168.0.9 255.255.255.255 is entered, the PIX Security Appliance displays the following message:

> nat 0 192.168.0.9 will be non-translated

Finally, if the administrator wants to clear or show all translations, the

xlate command should be used . The Online Command Reference examines this command and its syntax in more detail.

| Lab Activity e-Lab Activity: nat 0 Configuration In this activity, the student will demonstrate how to use the nat 0 command.