topic Re: clear access list on pix in Network Security

clear access list on pix

mahesh18 — Fri, 21 Feb 2020 15:45:46 GMT

Hi everyone,

Need to confirm if clear access list will remove the access group command applied on the interface.

regards

Mahesh

Re: clear access list on pix

Francesco Molino — Sun, 13 May 2018 04:44:59 GMT

Hi

The command clear access-list will clear counters.
To delete acl it clear configure access-list.

Which command are you taking about?

Re: clear access list on pix

mahesh18 — Sun, 13 May 2018 07:07:38 GMT

the reason i am saying this is that from our pix 515 somehow access-list interface access group command went missing and i found in syslog last person ran this command.

so to fix the issue i need to run the access group interface command on inside and outside interface so that acl can be applied to the interface.

Re: clear access list on pix

Marius Gunnerud — Sun, 13 May 2018 08:15:03 GMT

Just issuing the clear access-list command will clear clear the counters for that access-list (clear access-list MYACL counters). There is no other option for this command. So if this is the command that was entered the user did not delete the access-group.

Using the clear configure access-list <access-list name> will delete not only the access-list but also any command that references that access-list. So, for example, if you have a crypto map that references the access-list, then only the command that references the access-list will be deleted, not the whole crypto map.

Re: clear access list on pix

Francesco Molino — Mon, 14 May 2018 02:11:58 GMT

Ok. If he had entered the clear acl then only the counters were cleared.
What the exact command You're seeing in the log?

Re: clear access list on pix

mahesh18 — Mon, 14 May 2018 04:34:23 GMT

many thanks for answering the question.