Configuring Policy-Based Acls - Cisco WS-C6506 Software Manual

Chapter 44 Configuring Network Admission Control
This example shows how to clear an IP address from an exception group:
Console> (enable) clear eou authorize ip 10.1.1.1 255.255.255.240 policy pol1
Cleared host 10.1.1.1 255.255.255.240 from exception group and removed its policy mapping.
Console> (enable)
Clearing EAPOUDP-Related Timers to Their Default Values
To clear EAPOUDP-related timers to their default values, perform this task in privileged mode:
Task
Clear EAPOUDP-related timers to their default
values.
This example shows how to clear the hold-period timers to their default values:
Console> (enable) clear eou timeout hold-period
Console> (enable)
Clearing the CTA Packet Retransmit Time
To clear the global CTA packet retransmit time, perform this task in privileged mode (this command sets
the retransmit time back to the default value of 3):
Task
Clear the global CTA packet retransmit time.
This example shows how to clear the global CTA packet retransmit time:
Console> (enable) clear eou max-retry
Eou max-retry set to 3
Console> (enable)

Configuring Policy-Based ACLs

This section describes how to configure policy-based ACLs (PBACLs):
•
•
•
•
•
•
OL-8978-04
Adding IP Addresses to Existing Policy Groups, page 44-22
Adding a Policy Group to the Policy Template, page 44-22
Clearing an IP Address from a Policy Group, page 44-22
Clearing a Policy Group from a Policy Template, page 44-23
Displaying Policy Group Information, page 44-23
Displaying Policy Templates and Their Associated Policy Groups, page 44-24
Configuring Network Admission Control with LAN Port IP
Command
clear eou timeout [aaa | hold-period | restransmit |
revalidation | status-query]
Command
clear eou max-retry
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
44-21