Cisco SD-WAN : Centralized Policy

[RS19]

I have a query regarding the Centralized policy.

Below is my current centralized policy:

Centralized Policy:
!
control-policy Center_main
!
!
sequence 21
match route
site-list Site1
vpn-list A1
prefix-list NW_range
!
action accept
set
preference 100
!
!
!
sequence 31
match route
site-list Site1
vpn-list A1
prefix-list NW_WAN_range
!
action accept
set
preference 100
!
!
!
default-action accept

site-list DC
control-policy Center_main

Prefix Lists:
NW_range: 100.100.0.0/16
NW_WAN_range: 192.168.100.0/24

NW_range currently have 2 routes published (100.100.110.0/24, 100.100.120.0/24)
Now I am planning to add  new route say NW_range_1 - 100.100.130.0/24

But I don't want this route (100.100.130.0/24) to be learnt by site DC
Since already NW_range is summarized how can I prevent NW_range_1 - 100.100.130.0/24 from being learnt.

Any suggestions or recommendations ?






 

[RS19]

Any help

[rmfalconer]

You could create another prefix list for 100.100.130/24 and add a deny entry for that prefix list higher in your topology policy.

Or change your prefix lists to use /24s instead of a /16.

[Naseer Anjan]

you have to break the specific subnet rather summarizing them and do advertise only specific subnets  or you have to use ACL to allow/Deny that communications. 

[RS19]

I am trying to test what @rmfalconer  has mentioned.

Will that not work ?

[Naseer Anjan]

Yes you can go with his second option which i suggested.