Routing Order of Operations
The original information was taken from Cisco article on NAT Order of Operations. However, this order helps understand other features, like WCCP.
If IPSec then check input access list
decryption – for CET (Cisco Encryption Technology) or IPSec
check input access list
check URPF (Unicast Reverse Path Forwarding)
check input rate limits
input accounting – update stats
redirect to web cache
If configured with ip nat outside: NAT outside to inside (global to local translation)
policy routing
routing
If configured with ip nat outside: NAT inside to outside (local to global translation)
crypto (check map and mark for encryption)
check output access list
inspect (Context-based Access Control (CBAC))
TCP intercept
encryption
Queueing
Last updated