Dell Force10 S55T S55 Configuration Guide FTOS 8.3.5.3 - Page 117

Loopback interfaces do not support ACLs using the IP fragment option. If you configure an ACL with the fragments option and apply it to a loopback interface, the command is accepted, but the ACL entries are not actually installed the offending rule in CAM. See also Loopback Interfaces in the Interfaces chapter. Applying an ACL on Loopback Interfaces e ACLs can be applied on Loopback interfaces supported on platform To apply an ACL (standard or extended) for loopback, use these commands in the following sequence: Step Command Syntax Command Mode Purpose 1 interface loopback 0 CONFIGURATION Only loopback 0 is supported for the loopback ACL. 2 ip access-list [standard | extended] name 3 ip access-group name in CONFIGURATION Apply rules to the new ACL. INTERFACE Apply an ACL to traffic entering loopback. • in: configure the ACL to filter incoming traffic Note: ACLs for loopback can only be applied to incoming traffic. To apply ACLs on loopback, use the ip access-group command (Figure 235) in the INTERFACE mode. This example also shows the interface configuration status, adding rules to the access group, and displaying the list of rules in the ACL: Figure 7-12. Applying an ACL to the Loopback Interface Force10(conf)#interface loopback 0 Force10(conf-if-lo-0)#ip access-group abcd in Force10(conf-if-lo-0)#show config ! interface Loopback 0 no ip address ip access-group abcd in no shutdown Force10(conf-if-lo-0)#end Force10#configure terminal Force10(conf)#ip access-list extended abcd Force10(config-ext-nacl)#permit tcp any any Force10(config-ext-nacl)#deny icmp any any Force10(config-ext-nacl)#permit 1.1.1.2 Force10(config-ext-nacl)#end Force10#show ip accounting access-list ! Extended Ingress IP access list abcd on Loopback 0 seq 5 permit tcp any any seq 10 deny icmp any any seq 10 deny icmp any any Use the in keyword. Add rules to the ACL named "abcd." Display the ACL. Access Control Lists (ACL), Prefix Lists, and Route-maps | 117