HI, [Pls Rate if HELPS]

If your requirement is to block certain IP @ Address: The below is the Example Config:

Create an ACL:

R2(config)#access-list 30 permit host 20.2.2.2

R2(config)#access-list 31 permit host 20.3.3.3

Perhaps if you want to specifically block traffic sourced from 20.3.3.3 or 20.4.4.4. You can use multiple match statements in one single route map, and have packets matching those two addresses sent to the bit bucket - the interface null0.

R2(config)#route-map EXAMPLE permit 30

R2(config-route-map)#match ip address 31

R2(config-route-map)#match ip address 32

R2(config-route-map)#set interface null0

Any traffic matching ACLs 31 or 32 will be sent to null0, resulting in its being discarded by the router. Any traffic that didn't match any of the route map statements will be returned to the routing engine for normal processing.

Hope I am Informative.

Pls RATE if HELPS

Best Regards,

Guru Prasad R

Hello,

if you want traffic matching the access-list 150 to be sent to null0 why you want also to set an ip next-hop at the same time ?

I guess that if you remote the set ip next-hop you will be able to use the set interface null0 in this route-map clause.

there is no sense in setting an ip next hop if you want to discard traffic.

Of course I may be wrong, but experience says that it is not possible to use any combination of commands inside a route-map.

In this case if you set a next hop the IOS code treats the outgoing interface as multiaccess and does not allow you to use set interface that can be used for serial point-to-point interface only.

null0 is a logic interface for a waste bin.

hope to help

best regards

Giuseppe