204 | Access Controlw w w . d e l l . c o m | s u p p o r t . d e l l . c o m To apply an ACL (standard or extended) for loopback, use the following sequence:Restrictions on the usage of loopback interface ACLAs noted above, applying an ACL to loopback interface 0 in turn applies the ACL to all physicalinterfaces. To configure additional ACLs on a physical interface, be aware that the “loopback interfaceACL” might conflict with the desired physical interface ACL behavior.Example of loopback interface configuration sequenceIn the following example, two rules are added to ACL 2, and then ACL 2 is applied to the loopbackinterface.Step Command SyntaxCommandMode Purpose1 • For a Standard IP ACL:access-list 1-99 {deny | permit} {every | srcip srcmask} [log][assign-queue queue-id] [{mirror | redirect} unit/slot/port]• For an Extended IP ACL:access-list 100-199 {deny | permit} {every | icmp | igmp | ip |tcp | udp | protocol_number} {any | srcip srcmask} {any | eq{portkey | 0-65535}{ any | dstip dstmask} [eq {portkey | 0-65535}][ precedence precedence | tos tos tosmask | dscp dscp] [log][ assign-queue queue-id] [redirect unit/slot/port]GlobalConfigCreate an IP ACL.Note: The mirroroption is onlyavailable for the S50Vand S25P.2 interface loopback 0 GlobalConfigCreate the loopbackinterface and accessthe Interface Configmode.3 ip access-group ACLnumber [seq] in InterfaceConfigAttach the specifiedACL to the loopbackinterface.4 show ip access-lists [ACLnumber] PrivilegedExecDisplay rulesassociated with thespecified ACL.5 show interface loopback 0 PrivilegedExecDisplay the loopbackconfiguration.
