Cisco TrustSec Configuration Manual page 138

clear cts role-based counters
clear cts role-based counters
To reset Security Group ACL statistic counters, use the the clear cts role-basedcounters command in
EXEC or Privileged EXEC mode.
Syntax Description default
from
ipv4
ipv6
to
sgt_num
unknown
Command Modes
EXEC (>); Privileged EXEC (#)
Supported User Roles Administrator
Command History Release
12.2(50) SY
Usage Guidelines
Use the clear cts role-based counters command to clear the Security Group ACL (SGACL)
enforcement counters within the scope you specify. The show cts role-based counters tabulates the
statistics accumulated since the last clear command was issued, as shown in
Example 7-1
router# show cts role-based counters
Role-based counters
From
2
3
3
Cisco TrustSec Configuration Guide
7-52
clear cts role-based counters default [ipv4 | ipv6]
clear cts role-based counters from {sgt_num | unknown} [ipv4 | ipv6 | to {sgt_num | unknown}
[ipv4 | ipv6]]
clear cts role-based counters to {sgt_num | unknown} [ipv4 | ipv6 | ]
clear cts role-based counters [ipv4 | ipv6]
Default policy counters
Specifies the source security group
Specifies security groups on IP version 4 networks
Specifies security groups on IP version 6 networks
Specifies the destination security group
(0–65533) Specifies the Security Group Tag number
Specifies all Source Groups
Modification
This command was introduced on the Catalyst 6500 Series Switches.
Tabulated SGACL Output from show role-based counters
To SW-Denied
5 129
5 37
7 0
HW-Denied SW-Permitted
89762
123456
65432
Chapter 7 Cisco TrustSec Command Summary
Example 7-1.
HW_Permitted
421 7564328
1325 12345678
325 2345678
OL-22192-01