So, recently I had read somewhere that when we write ACLs to permit local IP addresses to access those in an IP NAT pool, it's said that, "..when interesting traffic has been matched with the access list, it's pulled into the NAT process to be translated."

Now, my question is: how exactly does this pulling process work? When the ACL is detected, is it first checked with any other process that might use it (NAT for example), and then if it fails that check, only does it apply it to it's default traffic filtering function, or how does it work?

Also, what else comes under the category of "interesting traffic?"

  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide your own answer and accept it.
    – Ron Maupin
    Aug 7, 2017 at 15:23

1 Answer 1


Interesting traffic is literally the traffic you are interested in for a particular reason. In the case you describe, traffic that is permitted by the ACL is the interesting traffic.

When traffic is coming from an inside interface, destined for an outside interface, it is compared against the ACL to see if it should be translated before it is sent through the outside interface. Traffic that matches the ACL is what is interesting to the NAT process.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.