Hello, I am trying to figure out a way to filter inbound routes.  I want to allow almost all other routes in, except the Default Route.  That one needs to stay local to router itself.  This connection is also connected via IPSec. The basic design of what this router is going to be is a Backup Connection router.  I have 26 routers out in the field.  The field router is running BGP talking to a ISP provider router.  It also has a fall back static route in case the primary circuit goes down to connect to a wireless backup.  We have found that wireless backup solution to be flaky, so we came up with out own.   We are also trying to make this as simple to deploy in the event of sudden outage and someone that isnt familiar with Networking can take it out and just plug it in and go.  I am trying to make it so that the only things that need to be changed on this hot device is the interface IP address, the static routes to the device behind it and thats it.  I tried to create a prefix list and filter inbound routes but the best I can find is that It allows all routes in, messing with the default and breaking the VPN tunnel. Even trying to filter some particular subnets out, it seems that the filtering does not work.  I had to do a hard coded static route to keep the internet and the VPN tunnel alive.  The routes in the prefix list are the only ones I want to allow in the Routing table.  All other networks are not important for this particular router.   In fact, I want to redistribute Static routes outbound as well as this router will be hooked up to another router.   Attachment 1 is the Config file and Attachment 2 is the sh Ip Route.   Any pointers in the right direction would be greatly appreciated.  ... View more