[c-nsp] BGP/route-map/acl question/logic...

[CiscoNSP List]

Hi Everyone,

If I want to block certain prefixes from an upstream, and accept the rest and then tag the accepted prefixes, which is the correct method..I *thought* the first one was correct, but it doesnt do what I expected...i.e. the ACL gets a hit on deny 10.0.0.0/24, but it is still allowed(i.e We still receive the prefix)?:

route-map UPSTREAM_A_IN permit 10
match ip address 98
continue 20
route-map UPSTREAM_A_IN permit 20
set community 12345:10000

access-list 98 deny   10.0.0.0 0.255.255.255
access-list 98 permit any

or...(I havent tested this one yet):

route-map UPSTREAM_A_IN deny 10
match ip address 98
continue 20
route-map UPSTREAM_A_IN permit 20
set community 12345:10000

access-list 98 permit   10.0.0.0 0.255.255.255

Cheers.