dynamic NAT: real_IPs -> pair w/ global pool
PAT -> one address
identity NAT -> same as real address
each globla pool -> pool ID
2 interface -> each one NAT rule -> both use same pool (e.g. inside & dmz)
global pool w/ multiple IP ranges -> taken in order found in config, then PAT
outside NAT rule: outside int ->translated-> inside int