Cisco IOS Order of Operation
The lists below apply to Cisco IOS. Keep in mind that this can be different, depending on the model and/or IOS version.
Inbound
- IP Traffic Export (RITE)
- QoS Policy Propagation through BGP (QPPB)
- Ingress Flexible NetFlow
- Network Based Application Recognition (NBAR)
- Input QoS Classification
- Ingress NetFlow
- IOS IPS Inspection
- Input Stateful Packet Inspection
- Input Access-List
- Input Flexible Packet Matching (FPM)
- IPSec Decryption
- Unicast RPF Check
- Input QoS Marking
- Input Policing
- Input MAC or IP Precedence Accounting
- NAT Outside-to-Inside
- Policy Routing
Outbound
- WCCP Redirect
- NAT Inside-to-Outside
- Network Based Application Recognition (NBAR)
- BGP Policy Accounting
- Output QoS Classification
- Output Access-List (ACL) Check
- Output Flexible Packet Matching (FPM)
- DoS Tracker
- Output Stateful Packet Inspection
- TCP Intercept
- Output QoS Marking
- Output Policing
- Output MAC or IP Precedence Accounting
- IPSec Encryption
- Egress Flexible Netflow
- Egress Flexible NetFlow
- Egress RITE
- Output Queueing