Nat command sequence

Posted on 2009-04-17
Last Modified: 2012-08-13
Current config is following
global (outside) 2 netmask
global (outside) 1 netmask

nat (inside) 0 access-list NONAT_in_out
nat (inside) 2 access-list WU_Policy_NAT
nat (inside) 1

Is there any problem in sequence like? it should be like following?

global (outside) 1 netmask
global (outside) 2 netmask

nat (inside) 0 access-list NONAT_in_out
nat (inside) 1
nat (inside) 2 access-list WU_Policy_NAT

Question by:JFexco
    1 Comment
    LVL 43

    Accepted Solution

    The ordering is not significant.

    The nat (inside) 0 is evaluated first.
    The nat (inside) 2 access-list WU_Policy_NAT is evaluated second.
    The nat (inside) 1 is evaluated last.

    This is the NAT order processing on the Firewall.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    This article will cover setting up redundant ISPs for outbound connectivity on an ASA 5510 (although the same should work on the 5520s and up as well).  It’s important to note that this covers outbound connectivity only.  The ASA does not have built…
    I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now