How to apply ACL to NAT

[rmaslanka]

When using a command like:

ip nat inside source static tcp 10.X.X.X 80 66.X.X.X 80 extendable

to route traffic from the internet to an internal web server, how can I / where do I apply an ACL to allow web traffic from only specific hosts / ranges on the internet?

[thisisshanky]

You can use route-maps which match those access-lists with the nat commands. But you need latest IOS, in the range of 12.2(4)T for a minimum.

Check this link.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t4/ftnatrt.htm