Introduction to Route-maps

Hello Austin

Having access lists with deny statements that are being used in match statements for route maps using deny statements again can get confusing. I’ll try to clarify for you.

Here we have an access list named R1_L0_DENY that denies 192.18.0.0/24. It also denies everything else because of the explicit deny at the end.

Now the route map called TEST_4 tries to match IP addresses within the R1_L0_DENY access list. But a route map will match only whatever is permitted by the called ACL. Since the R1_L0_DENY ACL in essence denies everything, this will never result in a match for the route map. Thus, it goes on to the next statement, which in this case is the implicit deny at the end of the route map. Thus the route map matches nothing, thus everything is denied, rather than just denying the single route that we wanted.

This is a particular behaviour of ACL/route map interaction that is further described in this post, with appropriate links to Cisco documentation:

I hope this has been helpful!

Laz