Reference Guide

OS10(conf-ipv4-acl)# seq 10 permit ip 102.1.1.0/24 any capture session 1 count byte
OS10(conf-ipv4-acl)# seq 15 deny udp any any capture session 2 count byte
OS10(conf-ipv4-acl)# seq 20 deny tcp any any capture session 3 count byte
OS10(conf-ipv4-acl)# exit
OS10(config)# interface ethernet 1/1/1
OS10(conf-if-eth1/1/1)# ip access-group testflow in
OS10(conf-if-eth1/1/1)# no shutdown
OS10(conf-if-eth1/1/1)# do commit
View access-list conguration
OS10# show ip access-lists in
Ingress IP access-list testflow
Active on interfaces :
ethernet1/1/1
seq 5 permit icmp any any capture session 1 count (0 packets)
seq 10 permit ip 102.1.1.0/24 any capture session 1 count bytes (0 bytes)
seq 15 deny udp any any capture session 2 count bytes (0 bytes)
seq 20 deny tcp any any capture session 3 count bytes (0 bytes)
View monitor sessions
OS10(conf-if-eth1/1/1)# show monitor session all
S.Id Source Destination Dir SrcIP DstIP DSCP TTL State Reason
----------------------------------------------------------------------------
1 ethernet1/1/1 ethernet1/1/4 both N/A N/A N/A N/A true Is UP
ACL commands
clear ip access-list counters
Clears ACL counters for a specic access-list.
Syntax
clear ip access-list counters [access-list-name]
Parameters access-list-name — (Optional) Enter the name of the IP access-list to clear counters (up to 140 characters).
Default Not congured
Command Mode EXEC
Usage Information If you do not enter an access-list name, all IPv6 access-list counters clear. The counter counts the number of
packets that match each permit or deny statement in an access-list. Clear the counters to start at zero to get a
more recent count of packets matching an access-list. Use the show access-lists command to view access-
list information.
Example
OS10# clear ip access-list counters
Supported Releases 10.2.0E or later
clear ipv6 access-list counters
Clears IPv6 access-list counters for a specic access-list.
Syntax
clear ipv6 access-list counters [access-list-name]
Parameters access-list-name — (Optional) Enter the name of the IPv6 access-list to clear counters (up to 140
characters).
Access Control Lists 387