To block a network or host prefix in a route-map the ACL format must be like this: access-l 100 permit (or deny) host (ip address prefix) host (netmask) if you want to do this through acl if you use a prefix list is easier because the format is more compressible and intuitive to understand it.