I do that but it dosen't work , access list match trafic but the route-map match nothing.
route-map df, permit, sequence 10
Match clauses:
ip address (access-lists): 1
Set clauses:
ip df 1
Policy routing matches: 0 packets, 0 bytes
my architecure is basic R1<------->R3
Config R1:
!
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime localtime
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
ip subnet-zero
!
!
ip cef
no ip domain lookup
ip domain name lab.local
no ip dhcp use vrf connected
!
!
!no ip ips deny-action ips-interface
ip sla monitor logging traps
ip sla monitor 1
type echo protocol ipIcmpEcho 20.20.20.2
request-data-size 1500
frequency 5
!ip sla monitor reaction-configuration 1 react timeout threshold-type immediate action-type trapOnly
!ip sla monitor schedule 1 life forever start-time now
!
no ftp-server write-enable
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!track 1 rtr 1 reachability
!
no crypto isakmp ccm
!
!
!
!
interface FastEthernet0/0
ip address 10.10.10.2 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet1/0
ip address 20.20.20.1 255.255.255.0
ip policy route-map df
duplex auto
speed auto
!
no ip http server
no ip http secure-server
ip classless
!
!
!
logging 10.10.10.1
access-list 1 permit 20.20.20.0 0.0.0.3
!
route-map df permit 10
match ip address 1
set ip df 1
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
end
Config R3:
!
!
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
memory-size iomem 5
ip subnet-zero
!
!
ip cef
no ip domain lookup
ip domain name lab.local
no ip dhcp use vrf connected
!
!
no ip ips deny-action ips-interface
!
no ftp-server write-enable
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
no crypto isakmp ccm
!
!
!
!
interface FastEthernet0/0
ip address 20.20.20.2 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet1/0
no ip address
duplex auto
speed auto
!
no ip http server
no ip http secure-server
ip classless
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
end
