Unless the specific NAT policy is provided during Static Port Forward (SPF) creation (SPF creation command), the port forward is created in the pool referenced in the default NAT policy. Nat-policy can be part of the command used to modify or delete SPF. If the NAT policy is not provided, then the behavior is:
If there is only one match, the port forward is modified or deleted.
If there is more than one match, modify or delete port forward must specify a NAT policy. Otherwise, the modify or delete action fails.
A match is considered when at least these parameters from the modify or delete command are matched (mandatory parameters in the spf command):
subscriber identification string
inside IP address
inside port
protocol
For a Layer 2-Aware NAT, an alternative AAA interface can be used to specify SPF. An alternative AAA interface and CLI-based port forwards are mutually exclusive. See the 7450 ESS, 7750 SR, and VSR RADIUS Attributes Reference Guide for more details.