 GAD deny 20 Chapter 14: Route Maps Be careful of the order in which you configure entries like these-in this case, access list 102 will be evaluated only if access list 101 matches. Combining the access lists into a single match statement changes the behavior of the route map. Because includ- ing the matches on a single line is considered an OR test, in this case, access list 102 will be evaluated regardless of whether access list 101 matches: route-map GAD permit 10 match ip address 101 102 route-map GAD deny 20 Similarly, we could use a route map to deny only certain routes while permitting all others by simply reversing the permit and deny clauses: route-map GAD deny 10 match ip address 101 102 route-map GAD permit 20 Policy-Routing Example Policy routing is the act of routing packets using some intelligence other than nor- mal routing. For example, with policy routing, you can send packets to a different destination than the one determined by the routing protocol running on the router. It does have some limitations, but this feature can get you out of some interesting jams. Figure 14-1 illustrates an example that comes from a real problem I encountered. Company-1 user Company-1 10.109.0.0/24 DLCI 101 10.101.0.0/24 S0/0.109 DLCI 109 Branch #9 Frame relay DLCI 209 S0/0.209 10.201.0.0/24 DLCI 201 Company-2 10.209.0.0/24 Company-2 users Figure 14-1. Policy-routing example Two companies, Company 1 and Company 2, partnered together. To save money, they decided they would build each branch such that it would be a single office that connected directly to both companies' headquarters. To save more money, they Policy-Routing Example decided they would split the cost of a single router for each branch. One Ethernet interface connected the workers from Company 1, while another Ethernet interface connected the workers from Company 2. The workers from each company, while sit- ting in the same office, could not interact with workers from the other company using the network. We had to put access lists on the Ethernet interf