2 Route-map(s) that match the same interface

[NetAdmin2]

I have the following configuration:

interface FastEthernet0/1/0
 ip address 70.56.84.93 255.255.255.252
 ip access-group ACL_Internet_Inside in
 ip access-group ACL_Internet_Outside out
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip flow ingress
 ip nat outside
 ip virtual-reassembly in
 duplex full
 speed 100
 
ip nat inside source static 172.26.200.51 212.118.121.220 route-map RM-PERMIT-NAT-INET-SOURCE-MIRRORED-172.26.200.220 extendable no-alias
ip nat inside source static 172.26.200.51 212.118.121.221 route-map RM-PERMIT-NAT-INET-SOURCE-MIRRORED-172.26.200.221 extendable no-alias

route-map RM-PERMIT-NAT-INET-SOURCE-MIRRORED-172.26.200.220 permit 10
 match ip address LIST-PERMIT-NAT-INET-SOURCE-MIRRORED-172.26.200.220
 match interface FastEthernet0/1/0

route-map RM-PERMIT-NAT-INET-SOURCE-MIRRORED-172.26.200.221 permit 10
 match ip address LIST-PERMIT-NAT-INET-SOURCE-MIRRORED-172.26.200.221
 match interface FastEthernet0/1/0

I'm trying to understand how come 2 route-map can "match" the same interface.

It's that possible ?

2nd question:

Let's say we want to remove the route maps and the ACL defined for the route maps.

What are the steps ? Remove first the NAT, 2nd remove the route-map, 3rd - remove the ACL ?

3rd question:

In case of a roll-back of the removed items, the process is the other way around ?

Create first the ACL, create the route-map and add the ACL defined first, and 3rd step - define the NAT ?

Thank you so much.

[Giuseppe Larosa · Accepted solution]

Hello @NetAdmin2 ,

it is supported because they are actually matching the exit interface .

In route-maps used with NAT this match interface is used for example to differentiate and use different address pools

Here they are used for two static NAT with extendable keyword.

2) you need first to remove each statement that invokes each route-map otherwise you cannot delete them. Then you can delete the route-maps and finally the ACLs.

3) Yes it is the opposite you need to create the ACL first, then to configure the route-maps, finally the statements using the two route maps

Hope to help

Giuseppe

[NetAdmin2]

Thank you so much Giuseppe.