[c-nsp] NAT ACL

[Rey Martin]

it should be filtering first.

rey
----- Original Message ----- 
From: <jcvaraillon at dolnet.gr>
To: <cisco-nsp at puck.nether.net>
Sent: Thursday, October 14, 2004 10:05 PM
Subject: [c-nsp] NAT ACL


>
>
>
>
> Hi,
>
>
> On an Ethernet interface, I have an incoming access-list (ip access-groupe 
> 10
> in) and I need to put
> a nat command (ip nat inside).
>
> I am concerned by the access-list 10.
>
> What is the router doing first: NATing or filtering ?
>
> Do the router filter what comes IN first and then do the NAT? In which 
> case I
> can keep my access-list.
>
> Do the router perfrom NAT first and then proceed with the filtering? In 
> which
> case I have to modify my access-list.
>
>
> Any comments/suggestions are welcom.
>
> Thanks
>
> Christophe
>
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/