match ip address (policy)

Use this command to match a packet against up to five access lists.

Syntax

match ip address access-list
no match ip address access-list

Parameters

access-list Matches a packet to up to five specified ACLs on the S- and K-Series and a single ACL on the 7100-Series, delineated by a space.

Defaults

None.

Mode

Policy-based routing configuration.

Usage

This command allows the listing of up to five specified ACLs on the S- and K-Series and a single ACL on the 7100-Series, delineated by a space. Attempting to specify more than the supported ACLs for the device will cause an error to display: Error: Unknown: “acl-name”.

A single 7100-Series match IP address entry or Multiple S- and K-Series match IP address entries may be configured, but a match of at least one ACL in each match entry must occur for a successful match for this sequence.

The “no” form of this command removes the match between an access list and this route-map.

Examples

This S- and K-Series example shows how to match a packet source IP address to access lists 1, 10, and extIP100:

System(rw-config)->route-map policy 101
System(rw-config-route-map-pbr)->match ip address 1 10 extIP100
System(rw-config-route-map-pbr)->show route-map 101
 route-map policy 101 permit 10
  match ip address 1 10 extIP10
 Policy matches: 0 packets

This 7100-Series example shows how to match a packet source IP address to access lists 1:

System(rw-config)->route-map policy 101
System(rw-config-route-map-pbr)->match ip address 1
System(rw-config-route-map-pbr)->show route-map 101
 route-map policy 101 permit 10
  match ip address 1
 Policy matches: 0 packets