Displaying The Acl Merge Tree Node Usage; Clearing Acl Statistics - Cisco 4700M Configuration Manual

Chapter 1 Configuring Security Access Control Lists

Displaying the ACL Merge Tree Node Usage

Clearing ACL Statistics

Note
OL-16202-01
You can display the ACL merge tree node usage by entering the following
command:
show np 1 | 2 access-list resource
The output of this command shows the used, guranteed, and maximum values of
the various ACL merge tree nodes. For more details about this command and
troubleshooting acl-memory Denied counts in the output of the show resource
usage command, see Step 5 in the
of the ACE Module Troubleshooting Wiki.
You can clear ACL statistics (hit counts for ACL entries) by using the clear
access-list command in Exec mode. The syntax of this command is as follows:
clear access-list name
The name argument is an existing ACL. Enter an unquoted text string with no
spaces and a maximum of 64 alphanumeric characters.
For example, enter:
host1/Admin# clear access-list acl1
If you configured redundancy, then you must explicitly clear ACL statistics (hit
counts) on both the active and the standby ACEs. Clearing statistics on the active
appliance only will leave the standby appliance's statistics at the old value.
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
Troubleshooting Access Control Lists
Clearing ACL Statistics
section
1-45