The CEF rewrite work (code changes) broke the NAT on stick feature for certain cases. We have now decided to document and suggest the below workaround: 1. Use ‘recursive ’ option under route-map, eg: “set ip next-hop recursive 10.0.1.0” 2. And use ‘no-alias’ option with NAT pool config, eg: “ip nat pool NAT 192.168.2.100 192.168.2.200 prefix-length 24 no-alias”