Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

nat 0 acl nat 0 static nat

Anybody know what the order of nat/static ....is it nat 0 acl, nat 0, static, nat ? where nat 0 acl is first and nat is last.....for ex. if i have an address that meets criteria for nat 0 acl, nat 0, static, nat...what will happen?

john

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: nat 0 acl nat 0 static nat

Order of preference for translations goes as follows:

1) nat 0 access-list (nat-exempt)

2) match against existing xlates

3) static

    a) static nat with and without access-list (first match)

    b) static pat with and without access-list (first match)

4) nat

    a) nat access-list (first match) Note: nat 0 access-list is not part of this command.

    b) nat

(best match) Note: When choosing a global address from multiple pools with the same nat id, the following order is tried

      i) if the id is 0, create an identity xlate.

      ii) use the global pool for dynamic NAT

      iii) use the global pool for dynamic PAT

5) Error

2 REPLIES
Cisco Employee

Re: nat 0 acl nat 0 static nat

Order of preference for translations goes as follows:

1) nat 0 access-list (nat-exempt)

2) match against existing xlates

3) static

    a) static nat with and without access-list (first match)

    b) static pat with and without access-list (first match)

4) nat

    a) nat access-list (first match) Note: nat 0 access-list is not part of this command.

    b) nat

(best match) Note: When choosing a global address from multiple pools with the same nat id, the following order is tried

      i) if the id is 0, create an identity xlate.

      ii) use the global pool for dynamic NAT

      iii) use the global pool for dynamic PAT

5) Error

New Member

Re: nat 0 acl nat 0 static nat

Knowing this order of preference is most helpful. I'd like to know more about the PIX order of operation. Where is this documented?

283
Views
0
Helpful
2
Replies
CreatePlease to create content