In which VPN is the NAT operation on an outgoing interface configured for direct Internet access?

In Cisco SD-WAN, VPN 0 is designated as the transport VPN and is where interfaces connecting to the underlying physical network, including the Internet, are configured. Therefore, NAT for outgoing direct Internet access is always configured on an interface within VPN 0 to translate private IP addresses from service VPNs.

VPN 512 is typically reserved for out-of-band management traffic and is not used for direct Internet access with NAT.

VPN 10 is a service VPN, used for user data traffic. Any traffic from VPN 10 destined for the Internet is routed to VPN 0 for NAT and egress.

VPN 1 is also a service VPN, similar to VPN 10, and routes its Internet-bound traffic through VPN 0 for NAT.