Cisco APIC Layer 3 Networking Configuration Guide, Release 6.2(x)

PDF

Cisco APIC Layer 3 Networking Configuration Guide, Release 6.2(x)

Match Rules

Want to summarize with AI?

Log in

Explains how match rules use prefixes, communities, and aggregation parameters to select routes for filtering or redistribution by a route map.


A match rule defines the route-selection criteria in a match profile (rtctrlSubjP) under a tenant (fvTenant).

Match Rule Configuration and Behavior

Match rules operate as follows:

  • An explicit prefix match (rtctrlMatchRtDest) supports a subnet and an optional aggregate setting. The aggregate setting is equivalent to the le option in an NX-OS prefix list.

  • Match rules of different types use a logical AND operation. A route must satisfy every match type.

  • Multiple rules of the same type use a logical OR operation. A route must satisfy at least one rule of that type.

  • If you configure multiple entries with the same base prefix but different aggregation parameters, the system retains only one entry because the base prefix is the unique key.

  • A per-peer route map that contains a permit-all rule followed by an exact-match rule might not process specific properties in the exact-match rule.

  • An empty route map that has no match clause permits or denies all routes according to its action. For static and direct routes, an empty route map does not permit routes.

Note

When an export route map under an L3Out EPG matches prefix 0.0.0.0/0 with aggregation enabled, the rule applies only to routes redistributed from dynamic routing protocols. The rule does not apply to bridge domain subnets, directly connected subnets on a border leaf switch, or static routes configured on the L3Out.

Beginning with Cisco APIC Release 4.2(3), you can configure a mask range when aggregation is enabled. The field names changed in subsequent releases.

Table 1. Match Prefix Field Names

Cisco APIC release

Field names

4.2(3)

From Prefix, To Prefix

5.2(2)

Greater Than Mask, Less Than Mask

5.2(6)

Greater Equal Mask, Less Equal Mask

The following table shows the prefix-list entries that the mask settings generate.

Table 2. Match Prefix Settings and Results

IP address and netmask

Aggregate

Greater Equal

Less Equal

Generated prefix-list entry

192.0.2.0/24

No

Not applicable

Not applicable

192.0.2.0/24

192.0.2.0/24

Yes

0

0

192.0.2.0/24 le 32

192.0.2.0/24

Yes

28

30

192.0.2.0/24 ge 28 le 30