what a ccna has to be capable of?, I mean in the field what can a ccna set up in a router or switch?how are those capabilities different from a ccnp? what can a ccnp do that a ccna can't

I am trying to set up a router as a ZBF and also PAT in the same device, but it is not working, but if I remove the IP Nat inside source list 101 interface Gi0/0/0 overload statement the firewall works, this is in packet tracer note that the ACL 101 ...

Estoy probando el zbf con packet tracer hasta el momento todo me ha funcionado pero cuando lo configuro en un router con PAT el ZBF no funciona y si quito el PAT funciona bien, en el packet tracer me sale un mensaje de que no se encontró el zone pair...