clear access list on pix

[mahesh18]

Hi everyone,

Need to confirm if clear access list will remove the access group command applied on the interface.

regards

Mahesh

[Francesco Molino · Accepted solution]

Hi

The command clear access-list will clear counters.
To delete acl it clear configure access-list.

Which command are you taking about?

[mahesh18]

the reason i am saying this is that from our pix 515 somehow access-list interface access group command went missing and i found in syslog last person ran this command.

so to fix the issue i need to run the access group interface command on inside and outside interface so that acl can be applied to the interface.

[Francesco Molino]

Ok. If he had entered the clear acl then only the counters were cleared.
What the exact command You're seeing in the log?

[Marius Gunnerud · Accepted solution]

Just issuing the clear access-list command will clear clear the counters for that access-list (clear access-list MYACL counters).  There is no other option for this command.  So if this is the command that was entered the user did not delete the access-group.

Using the clear configure access-list <access-list name> will delete not only the access-list but also any command that references that access-list.  So, for example, if you have a crypto map that references the access-list, then only the command that references the access-list will be deleted, not the whole crypto map.

[mahesh18]

many thanks for answering the question.