Can any one explain following command as i have found much documentation for it: nat 0 acl/IP Range My scenario is , i want to limit few subnet (inside) not to use internet - but at the very same time i want them to explicitly use public Internet for 1 or 2 IP's only. if any one can list his example. thanks in advance. SA