So now we can actually start on our static nat config (with static Nat, there’s one command !  but with dynamic NAT we end up doing an ACL to identify the inside devices that can have their addresses translated) With static nat the only command we’re dealing with really is “creating the static mapping”. And

Time based ACLs are great, but if the routers involved aren’t keeping the same time and calendar (don’t have a synchronized time and don’t have synchronized dates) , the ACLs are unlikely to work as we had planned. So that’s a small problem that can come in and there are some bigger problems too. It’s