Clearing Acl Counters; Debugging Acls - HP 7102dl - ProCurve Secure Router Configuration Manual

Configuring Network Address Translation
Troubleshooting
6-24

Clearing ACL Counters

Clearing ACL counters helps you to troubleshoot and isolate problems with
the ACLs that are configured on a router. When you clear the counters, the
Secure Router OS resets the number of matches to every ACL entries. You can
then reproduce a problem and check the number of matches for a particular
entry to determine whether the ACL is selecting traffic correctly. To clear ACL
counters, enter this command from the enable mode context:
Syntax: clear access-list [<listname>]
If you want to clear all counters, enter:
ProCurve# clear access-list
If you want to clear counters for a particular ACL, use the <listname> option:
ProCurve# clear access-list <listname>
For example, if you want to clear the counters for the Inside ACL, enter:
ProCurve# clear access-list Inside

Debugging ACLs

You can debug events associated with a particular ACL. From the enable mode
context, enter:
Syntax: debug access-list <listname>
Replace <listname> with the name of the ACL you want to debug.
For example, if you want to debug the Inside ACL, enter:
ProCurve# debug access-list Inside
Messages display dealing with the incoming packets that matches entries in
the ACL.
To stop the debug messages, enter the following command:
Syntax: no debug access-list <listname>