PIX firewall policy based NAT orders?

[zhichao]

The PIX is configured with two ACls, and these two ACLs are used for the policy based NAT to translate them to two different public IP addresses.

Since there is no deny statement is allowed for policy based NAT, we faced a lot of problem when creating the ACLs.

If the two ACLs are overlapping, how does PIX decide which one to use ? By the NAT ID? or by longest match? or ...

thanks!

[drolemc]

You could refer to the documentation to see if it helps. http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/bafwcfg.htm#1113601

[zhichao]

thanks. but which portion of the docu? The URL direct me to the begining of the lenghy document?