Thanks to those on and off list who helped me on this, I was assuming "ip nat inside" needed to be applied to an interface that had the network that is inside nat applied to it. It is clear what to do once I understood how "ip nat inside" functions. james