Users Guide

688 Access Control Lists
• List of default next-hop IP addresses — The set ip default next-hop
command checks the list of destination IP addresses in the routing table
and, if there is no explicit route for the packet's destination address in the
routing table, the next-hop destinations are evaluated, and packets are
routed to the first-available next hop. Packets that do not match are routed
using the routing table. A default route in the routing table is not
considered an explicit route for an unknown destination address. This type
of rule takes priority over default entries in the routing table.
• IP precedence — Packets matching the ACL criteria have their IP
precedence rewritten. The IP precedence value is the 4 ToS bits in the IP
packet header.
The following table summarizes the actions taken by the routing policy
depending on the combination of ACL and route-map permit and deny rules:
In the table, the Action column indicates the disposition of the packet:
• Next means fall through to next route-map, and if there are no further
route-maps to be processed, route the packet using the default routing
table.
• Set means route the packet per the action in the set clause.
• Route means route the packet with the default routing table.
ACL Match Route-Map Outcome Action Optimized
Permit Yes Permit Permit Set No
Permit No Permit Deny Next No
Permit Yes Deny Permit Route No
Permit No Deny Deny Next No
Deny Yes Permit Deny Next Yes
Deny No Permit Deny Next Yes
Deny Yes Deny Deny Next Yes
Deny No Deny Deny Next Yes