Performing cascading lookups at a network node involves using first header information from a packet to search a first set of search criteria for a match, identifying a tag associated with the match, and using second header information from the packet and the tag to search a second set of search criteria for another match.