ACL and reverse-nat

yoyo_the_king · ‎08-26-2010

Hi All,

I want to apply a PBR on ADSL Router (1800 series) on the return of packet for a user in Lan behind a firwall.

so i create an acl with criter of destination ip address of this user.

as the access is ADSL, all ip are hided behind public ip adress.

so the return packet come with destination adress of public ip.

the question is: the acl is verified before reverse-nat??? if so the acl with criter of user ip will never matched.

or the acl is verified after the reverse-nat???

thanks for your help

Atif Awan · ‎08-26-2010

As per the documented NAT order of operations at:

http://www.cisco.com/application/pdf/paws/6209/5.pdf

NAT should happen before PBR so you should be able to use the subscriber's internal IP Address as the destination IP in your PBR ACL. It should not take much time to test it out first in a controlled manner.

Atif