1. NAT
   1. Basic NAT
      1. *STEPS* 1. Define Inside traffic 2. Define Pool 3. Define inside/outside interfaces 4. Map inside IPs to outside pool
      2. *DEFINITION* Maps one inside IP to one outside IP
   2. NAT Overload
      1. *STEPS* 1. Define inside traffic 2. Define Inside/Outside interfaces 3. Map inside source list with outside interface and apply the "Overload" option
      2. *DEFINITION* Maps many inside IPs to one outside IP and changes port numbers to help differentiate
   3. NAT with Route Maps
      1. *STEPS* 1. Define ACLs identifying source IPs in route maps 2. Define route maps using ACLs defined and interface destined for 3. Define NAT pools as needed 4. Define inside/outside interfaces 5. Map inside source using the route maps to the outside interface overload/nat pool
      2. *DEFINITION* Uses route-maps to define source IP/destination next-hop interface to define what outside IP they will be mapped to
   4. Static NAT
      1. *STEPS* 1. Define inside/outside interfaces 2. Map inside address to outside address statically
      2. *DEFINITION* Maps one inside IP to one outside IP statically
   5. Static PAT
      1. *STEPS* 1. Define inside/outside interfaces 2. Define inside address:port to outside address:port statically (Protocol needs to be defined as well)
      2. *DEFINITION* Maps an inside IP to an outside IP with statically defined port numbers statically. Allows for many inside IPs to be mapped to one outside IP
   6. Static Policy NAT
      1. *STEPS* 1. Define route-map with NATing interface 2. Define inside/outside interfaces 3. Map inside IP and outside IP, specifying applicable route-map
      2. *DEFINITION* Allows to map specific inside IPs multiple times to two different interfaces (i.e. a server that provides services to the outside that uses multiple ISP links would need to NAT on two different interfaces)
   7. TCP Load Distribution with NAT
      1. *STEPS* 1. Define nat pool of destination servers and set rotary option 2. Define ACL which sets what IP/port would be used as the front-end IP to be load-balanced (From the outside interface) 3. Define inside/outside interfaces 4. Define NAT statement mapping inside destination list and pool to be load balanced to
      2. *DEFINITION* Defines a pool of inside addresses that will be load balanced to based on the outside IP/port mapping
   8. NAT Default Interface
      1. *STEPS* 1. Define ACL permitting any traffic 2. Define inside/outside interfaces 3. Define NAT static mappings that define inside to outside IP 4. Define NAT mapping with ACL defining static mappings for all other inside IPs to a default outside interface
      2. *DEFINITION* Useful for different outbound/inbound traffic flows of an application. Defines a default interface for all other inside IPs not explicitly defined
   9. Reversible NAT
      1. *STEPS* 1. Define ACL of source IPs 2. Define route map affiliating ACL and defining an egress interface 3. Define a NAT pool 4. Define inside/outside interfaces 5. Define NAT statement mapping source IPs from the route map as well as affiliating the NAT pool, passing in the reversible option
      2. *DEFINITION* Used to allow connections to initiate from the outside in and create an entry as NAT entries by default do not allow out to inside.
   10. Static Extendable NAT
       1. *STEPS* 1. Define inside interface/outside interfaces 2. Define multiple static entries defining the same inside IP multiple times to different external interface IPs
       2. *DEFINITION* Allows not obligating a one-to-one binding of a specific inside local/global IP. Can have multiple inside global addresses defined to one inside local address or vice versa
2. QoS
   1. NBAR
      1. Custom Application
         1. *SYNTAX* ip nbar custom [app name] [criteria]
         2. Not supported on IOSv
      2. Non-default port-map
         1. *SYNTAX* ip nbar port-map [application] [criteria]
      3. Custom Application Payload
         1. *SYNTAX* ip nbar custom [app name] [byte offset] (ascii | decimal | hex) [content] [criteria]
         2. Not supported on IOSv
3. Access-Lists
   1. Standard
      1. Only specifies source
   2. Extended
      1. Specifies source and destination
      2. Can specify port/protocol
   3. Time-Based
      1. Can allow/deny users at certain time of day/week
      2. Time-range types
         1. Absolute
            1. Non-repeating
         2. Periodic
            1. Recurring (Every weekday 8-5 pm)
   4. Traffic Filtering with PBR
      1. Allows to use route-maps in conjunction with ACLs
      2. Use cases
         1. Identifying a specific packet size
   5. uRPF
      1. Used to drop packets that have invalid sources
      2. Types
         1. Loose
            1. Only checks routing table entry
         2. Strict
            1. Checks routing table entry and ensures packet was received on valid interface/next hop information
   6. VLAN Filtering
      1. Filters specific VLANs on switches using IP or non-IP criteria (Ingress only)
      2. Types
         1. Non-IP
            1. CDP
            2. VTP
            3. UDLD
            4. ARP
         2. IP
   7. ARP
      1. Used to provide granularity for Dynamic ARP Inspection
   8. MAC