Operation Manual

Security ACL Commands
Security ACL Commands
15 – 393
clear security acl map
Deletes the mapping between a security ACL and a virtual LAN (VLAN), one or more physical
ports, or a virtual port. Or deletes all ACL maps to VLANs, ports, and virtual ports on an MX .
Syntax clear security acl map {acl-name | all} {vlan vlan-id | port port-list [tag
tag-value] | ap apnum} {in | out}
Defaults None.
Access Enabled.
History
Usage
To clear a security ACL map, type the name of the ACL with the VLAN, physical port or
ports, virtual port tag, or Distributed MP and the direction of the packets to stop filtering. This
command deletes the ACL mapping, but not the ACL.
Examples To clear the mapping of security ACL acljoe from port 4 for incoming packets, type the
following command:
MX# clear security acl map acljoe port 4 in
clear mapping accepted
To clear all physical ports, virtual ports, and VLANs of mapped ACLs on an MX for incoming and
outgoing traffic, type the following command:
MX# clear security acl map all
Note:
Security ACLs are applied to users or groups dynamically via the Filter-Id
attribute. To delete a security ACL from a user or group in the local MX
database, use the command clear user attr, clear mac-user attr, clear
usergroup attr, or clear mac-usergroup attr. To delete a security ACL
from a user or group on an external RADIUS server, see the documentation
for your RADIUS server.
acl-name Name of an existing security ACL to clear. ACL names start with a letter and are
case-insensitive.
all Removes security ACL mapping from all physical ports, virtual ports, and VLANs
on an MX switch.
vlan vlan-id VLAN name or number. MSS removes the security ACL from the specified VLAN.
port port-list Port list. MSS removes the security ACL from the specified MX physical port or
ports.
tag tag-value Tag value that identifies a virtual port in a VLAN. Specify a value from 1 through
4095. MSS removes the security ACL from the specified virtual port.
ap apnum One or more MPs, based on their connection IDs. Specify a single connection ID,
or specify a comma-separated list of connection IDs, a hyphen-separated range, or
any combination, with no spaces. MSS removes the security ACL from the
specified MPs.
in Removes the security ACL from traffic coming into the MX.
out Removes the security ACL from traffic going out of the MX.
MSS Version 1.0 Command introduced
MSS Version 1.1
❑ Keyword and variable tag tag-value added to delete security ACL mapping from
virtual ports
❑ ACL names changed from case-sensitive to case-insensitive
MSS Version 2.0 Keyword and variable dap dap-num added to delete security ACL mapping from
Distributed MPs