How to clear ACL count

[johnlloyd_13]

hi all,

just a basic and quick question.

i'm currently troubleshooting on one of our ASA and would like to see if traffic hits the ACL.

how do you clear the ACL count?

access-list OUTSIDE line 161 extended permit ip host 1.1.1.1 host 2.2.2.2 (hitcnt=796) 0x4f7d9f2c

[mahesh18]

Hi John,

You can issue the command

ASA1(config)# clear access-list   ?

exec mode commands/options:
  WORD < 241 char  Access-list identifier

it will erase the counters of the ACL.

Regards

Mahesh

[johnlloyd_13]

hi mahesh,

but does that command remvoes the ACL or is it clear configure <ACL>?

just want to make sure before i issue the command.

[mahesh18]

That command only removes ACL counters.

To remove entire ACL you use clear configure access-list followed by name of ACL.

Regards

MAhesh

[nkarthikeyan · Accepted solution]

Hi John,

One small correct from mahesh's statement..... you have to issue

clear access-list <aclname> counters to clear the counter. This can be issued in priveleaged mode.

clear configure access-list <aclname> - This deletes your acl and which can issued from config terminal mode.

Regards

Karthik

[johnlloyd_13]

Thanks guys!