When we use 'srr-queue bandwidth limit' command to one of the interfaces, what mode is applied?Policing (drop happen)? or Shaping (buffering, no drop)?

I know that firewalls cannot perform NAT when CSS do FWLB.Then, what about CSM?Does CSM support performing NAT on the firewalls when it acts as FWLB?If someone has experience or sample config, let me know.Thanks in advance.

Same question as TRAVIS MARLOW did below.Does IOS NAT support hairpin nat?It seems like IOS does NOT support hairpin nat.It will be supported near future?Please, someone let me know.Thanks in advance.

When it comes to say "Protection Types", there are many types I could see:1:1 mode1+1 mode1:m mode etc...Could someone explain what they are?Thanks in advance.

I'm using OSPF as a IGP.When I use "show ip route" command, I can see the "forward metric" from the output.What is the "forward metric"?-----------------------------------------------------Router#sh ip route 10.17.17.0Routing entry for 10.17.17.0/24 ...