Chapter 15
Configuring Access Control
To enable the ACL statistics on a per-ACE basis, perform this task in privileged mode:
Task
Enable the ACL statistics on a
per-ACE basis.
This example shows how to enable the ACL statistics on a per-ACE basis:
Console> (enable) set security acl ip ACL1 permit ip any any statistics
ACL1 editbuffer modified. Use 'commit' command to apply changes.
Console> (enable) commit security acl ACL1
ACL commit in progress.
ACL 'ACL1' successfully committed.
Console> (enable)
Console> (enable) show security acl info ACL1
set security acl ip ACL1 statistics
---------------------------------------------------
arp permit
1. permit ip any any
2. permit ip any any statistics
Console> (enable)
Clearing ACL Statistics
Use the commands described in this section to clear the ACL statistics:
•
•
OL-8978-04
clear security acl statistics acl_name
Disables the collection of statistics for all the ACEs in the specified ACL. This command works only
for the ACL statistics that are configured on a per-ACL basis. The command does not work for the
ACL statistics that are configured on a per-VLAN or per-ACE basis. This command is effective only
after you enter the commit command to commit all ACEs to NVRAM.
An example is as follows:
Console> (enable) clear security acl statistics ACL1
ACL1 editbuffer modified. Use 'commit' command to save changes.
Console> (enable) commit security acl ACL1
ACL commit in progress.
ACL 'ACL1' successfully committed.
Console> (enable)
clear security acl counters
Clears all statistic counters.
An example is as follows:
Console> (enable) clear security acl counters
Operation Successful.
Console> (enable)
Command
set security acl ip/mac acl_name ... [statistics]
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
Configuring ACL Statistics
15-85