Hub/Switch Reference Guide

460 Security ACL Commands
NN47250-100 (Version 02.51)
Defaults
None.
Access
Enabled.
Usage
This command deletes security ACLs only in the edit buffer. You must use the commit security acl
command with this command to delete the ACL or ACE from the running configuration and nonvolatile
storage.
The clear security acl command deletes a security ACL, but does not stop its current filtering function if the ACL is
mapped to any virtual LANs (VLANs), ports, or virtual ports, or if the ACL is applied in a Filter-Id attribute to an
authenticated user or group of users with current sessions.
Examples
The following commands display the current security ACL configuration, clear acl_133 in the
edit buffer, commit the deletion to the running configuration, and redisplay the ACL configuration to show that
it no longer contains acl_133:
WSS# show security acl info all
ACL information for all
set security acl ip acl_133 (hits #1 0)
---------------------------------------------------------
1. deny IP source IP 192.168.1.6 0.0.0.0 destination IP any
set security acl ip acl_134 (hits #3 0)
---------------------------------------------------------
1. permit IP source IP 192.168.0.1 0.0.0.0 destination IP any enable-hits
set security acl ip acl_135 (hits #2 0)
---------------------------------------------------------
1. deny IP source IP 192.168.1.1 0.0.0.0 destination IP any enable-hits
WSS# clear security acl acl_133
WSS# commit security acl acl_133
configuration accepted
WSS# show security acl info all
ACL information for all
set security acl ip acl_134 (hits #3 0)
---------------------------------------------------------
1. permit IP source IP 192.168.0.1 0.0.0.0 destination IP any enable-hits
set security acl ip acl_135 (hits #2 0)
---------------------------------------------------------
1. deny IP source IP 192.168.1.1 0.0.0.0 destination IP any enable-hits
See Also
clear security acl map on page 451
commit security acl on page 452
set security acl on page 454
show security acl info on page 463