Hello, I configured the following nat (inside) 0 0 static (inside,outside) 172.16.1.1 172.16.1.1 netmask 255.255.255.255 Also on the outside acl i permit any for testing. I want to be able to initiate connections from both the inside and outside. With the above config i could initiate conn's from the inside but not the outside until i changed the config to nat (inside) 0 access-list inside-nets static (inside,outside) 172.16.1.1 172.16.1.1 netmask 255.255.255.255 Is this the difference between identity nat and nat exemption and if so what exactly is going on here? Thanks.