I've been digging around in the IOS 12.4 on-line documentation and finding just enough information to make me ask more questions, that I can't find answers for. Any help is greatly appreciated.
I have a system with one external interface and many internal network interfaces. For security we are looking at using RFC 1918 IP addresses for the internal networks and implementing nat for external routing.
Also for security reasons we need to ensure that only traffic for each specific subnet can route through its internal interface, both into and out of the router. To me, it appears that we will need a separate access-list for each interface, is this correct?
We also have security mandates that require the use of the "IP access-list extended" format. is that format compatible with nat?
Can an IP nat pool support more than one IP source list (access-list) or do we need one pool for each list? Can the IOS even support more than one pool? If so, is there a limit to the number of pools that are supported?
Another issue is that we will have some applications that require the end unit to have a routable IP address. They will have their one dedicated internal interface, but everything shares the same external interface. Can one external interface support both?
Manuel Dennis
