route-map/ACL permit/deny general logic question...

[mmanthe]

Actually I have 2 (logic based) questions:

1. If a route-map PERMIT statement matches against an ACL/ACE DENY entry, my understanding of the logic is that the route-map entry has been 'denied to permit'. Does this mean that the entry is 'not permitted' (e.g. in the case of the prefix referenced in the ACE it will be filtered) - or does it mean that this route-map sequence entry will not be processed (e.g. move on to the next in sequence)?

2. In what scenario(s) would anyone use DENY statements in an ACL for a route-map?

Thanks in advance!

[paul driver · Accepted solution]

Hello

I have this always handy in a little txt file:

Using an ACL in a route-map permit clause, routes that are permitted by the ACL are redistributed.

Using an ACL in a route-map deny clause, routes that are permitted by the ACL are not redistributed.

Using an ACL in a route-map permit or deny clause, and the ACL denies a route, then the route-map clause match is not found and the next route-map clause is evaluated.

res
Paul

[mmanthe]

Perfect! That answers my question - thank you! I hope you won't mind if I keep your 'little txt file' handy as well ;-)

PS - understanding this, I still can't think of an actual reason to use an ACL 'deny' with a route-map