Feedback
Table Of Contents
clear aaa local user fail-attempts
clear configure arp-inspection
clear configure ca certificate map
clear configure crypto ca trustpoint
clear configure crypto dynamic-map
clear configure ip verify reverse-path
clear configure mac-address-table
clear configure management-access
clear configure multicast-routing
clear configure priority-queue
clear configure service-policy
clear configure vpn-load-balancing
clear crypto accelerator statistics
clear crypto protocol statistics
clear ipv6 access-list counters
clear memory delayed-free-poisoner
clear priority-queue statistics
clear service-policy inspect gtp
clear url-block block statistics
crypto dynamic-map match address
crypto dynamic-map set nat-t-disable
crypto dynamic-map set reverse route
crypto map set security-association lifetime
crypto dynamic-map set transform-set
crypto ipsec security-association lifetime
crypto ipsec transform-set mode transport
crypto map ipsec-isakmp dynamic
crypto map set connection-type
crypto map set security-association lifetime
C Commands
cache-time
To specify in minutes how long to allow a CRL to remain in the cache before considering it stale, use the cache-time command in ca-crl configuration mode. To return to the default value, use the no form of this command.
cache-time refresh-time
no cache-time
Syntax Description
refresh-time
Specifies the number of minutes to allow a CRL to remain in the cache. The range is 1 - 1440 minutes. If the NextUpdate field is not present in the CRL, the CRL is not cached.
Defaults
The default setting is 60 minutes.
Command Modes
The following table shows the modes in which you can enter the
CRL configuration
•
•
•
•
•
command:
Command History
Examples
The following example enters ca-crl configuration mode, and specifies a cache time refresh value of 10 minutes for trustpoint central:
hostname(configure)# crypto ca trustpoint centralhostname(ca-trustpoint)# crl configurehostname(ca-crl)# cache-time 10hostname(ca-crl)#Related Commands
call-agent
To specify a group of call agents, use the call-agent command in MGCP map configuration mode, which is accessible by using the mgcp-map command. To remove the configuration, use the no form of this command.
call-agent ip_address group_id
no call-agent ip_address group_id
Syntax Description
ip_address
The IP address of the gateway.
group_id
The ID of the call agent group, from 0 to 2147483647.
Defaults
This command is disabled by default.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Usage Guidelines
Use the call-agent command to specify a group of call agents that can manage one or more gateways. The call agent group information is used to open connections for the call agents in the group (other than the one a gateway sends a command to) so that any of the call agents can send the response. Call agents with the same group_id belong to the same group. A call agent may belong to more than one group. The group_id option is a number from 0 to 4294967295. The ip_address option specifies the IP address of the call agent.
Examples
The following example allows call agents 10.10.11.5 and 10.10.11.6 to control gateway 10.10.10.115, and allows call agents 10.10.11.7 and 10.10.11.8 to control both gateways 10.10.10.116 and 10.10.10.117:
hostname(config)# mgcp-map mgcp_inboundhostname(config-mgcp-map)# call-agent 10.10.11.5 101hostname(config-mgcp-map)# call-agent 10.10.11.6 101hostname(config-mgcp-map)# call-agent 10.10.11.7 102hostname(config-mgcp-map)# call-agent 10.10.11.8 102hostname(config-mgcp-map)# gateway 10.10.10.115 101hostname(config-mgcp-map)# gateway 10.10.10.116 102hostname(config-mgcp-map)# gateway 10.10.10.117 102Related Commands
capture
To enable packet capture capabilities for packet sniffing and network fault isolation, use the capture command. To disable packet capture capabilities, use the no form of this command (see the "Usage Guidelines" section for additional information about the no form of this command).
capture capture_name [access-list access_list_name] [buffer buf_size] [ethernet-type type] [interface interface_name] [packet-length bytes] [circular-buffer]
capture capture_name type asp-drop all [drop-code] [buffer buf_size] [circular-buffer] [packet-length bytes]
capture capture_name type isakmp [access-list access_list_name] [buffer buf_size] [circular-buffer] [interface interface_name] [packet-length bytes]
capture capture_name type raw-data [access-list access_list_name] [buffer buf_size] [circular-buffer] [ethernet-type type] [interface interface_name] [packet-length bytes]
capture capture_name type webvpn user webvpn-user [url url]
no capture capture_name
Syntax Description
Defaults
The defaults are as follows:
•
•
•
•
•
Command Modes
The following table shows the modes in which you can enter the command:
Privileged mode
·
·
·
·
·
Command History
Usage Guidelines
Capturing packets is useful when troubleshooting connectivity problems or monitoring suspicious activity. The security appliance can track packet information for traffic that passes through it, including management traffic and inspection engines. Packet information for all traffic that passes through the device can be captured.
With ISAKMP, the ISAKMP subsystem does not have access to the upper layer protocols. The capture is a pseudo capture, with the Physical, IP, and UDP layers combined together to satisfy a PCAP parser. The peer addresses are obtained from the SA exchange and are stored in the IP layer.
When selecting an Ethernet type to be included from capture, an exception occurs with the 802.1Q or VLAN type. The 802.1Q tag is automatically skipped and the inner Ethernet type is used for matching. By default, all the Ethernet types are accepted.
Once the byte buffer is full, packet capture stops.
To enable packet capturing, attach the capture to an interface with the interface optional argument. Multiple capture command statements attach the capture to multiple interfaces.
If you copy the buffer contents to a TFTP server in ASCII format, you will see only the headers, not the details and hexadecimal dump of the packets. To see the details and hexadecimal dump, you need to transfer the buffer in PCAP format and read it with TCPDUMP or Ethereal.
The ethernet-type and access-list optional keywords select the packets to store in the buffer. A packet must pass both the Ethernet and access list filters before the packet is stored in the capture buffer.
The circular-buffer keyword allows you to enable the capture buffer to overwrite itself, starting from the beginning, when the capture buffer is full.
Enter the no capture command with either the access-list or interface optional keyword unless you want to clear the capture itself. Entering no capture without optional keywords deletes the capture. If the access-list optional keyword is specified, the access list is removed from the capture and the capture is preserved. If the interface optional keyword is specified, the capture is detached from the specified interface and the capture is preserved.
Note
Use the copy capture: capture_name tftp://server/path [pcap] command to copy capture information to a remote TFTP server.
Use the https://securityappliance-ip-address/capture/capture_name[/pcap] command to see the packet capture information with a web browser.
If you specify the pcap optional keyword, then a libpcap-format file is downloaded to the web browser and can be saved using the web browser. (A libcap file can be viewed with TCPDUMP or Ethereal.)
When you enable WebVPN capture, the security appliance creates a pair of matching files:
capture name_ORIGINAL.000 and capture name_MANGLED.000. For each subsequent capture, the security appliance generates additional matching pairs of files and increments the file extensions. url is the URL prefix to match for data capture. Use the URL http://server/path to capture HTTP traffic to the server. Use https://server/path to capture HTTPS traffic to the server.
Note
type asp-drop Drop Codes
The following table lists valid values for the optional drop-code argument that can follow the type asp-drop keyword.
Examples
To enable packet capture, enter the following:
hostname(config)# capture captest interface insidehostname(config)# capture captest interface outsideOn a web browser, the capture contents for a capture named "mycapture" can be viewed at the following location:
https://171.69.38.95/capture/mycapture/pcapTo download a libpcap file (used in web browsers such as Internet Explorer or Netscape Navigator) to a local machine, enter the following:
https://171.69.38.95/capture/http/pcapThis example shows that the traffic is captured from an outside host at 171.71.69.234 to an inside HTTP server:
hostname(config)# access-list http permit tcp host 10.120.56.15 eq http host 171.71.69.234hostname(config)# access-list http permit tcp host 171.71.69.234 host 10.120.56.15 eq httphostname(config)# capture http access-list http packet-length 74 interface insideThis example shows how to capture ARP packets:
hostname(config)# capture arp ethernet-type arp interface outsideThis example creates a WebVPN capture designated hr, which is configured to capture HTTP traffic for user2 visiting website wwwin.abcd.com/hr/people:
hostname# capture hr type webvpn user user2 url http://wwwin.abcd.com/hr/peopleWebVPN capture started.capture name hruser name user2url /http/0/wwwin.abcd.com/hr/peoplehostname#Related Commands
clear capture
Clears the capture buffer.
copy capture
Copies a capture file to a server.
show capture
Displays the capture configuration when no options are specified.
cd
To change the current working directory to the one specified, use the cd command in privileged EXEC mode.
cd [disk0: | disk1: | flash:] [path]
Syntax Description
Defaults
If you do not specify a directory, the directory is changed to the root directory.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
—
•
Command History
Examples
This example shows how to change to the "config" directory:
hostname# cd flash:/config/Related Commands
certificate
To add the indicated certificate, use the certificate command in crypto ca certificate chain mode. When you use this command, the security appliance interprets the data included with it as the certificate in hexadecimal format. A quit string indicates the end of the certificate.
To delete the certificate, use the no form of the command.
certificate [ca | ra-encrypt | ra-sign | ra-general] certificate-serial-number
no certificate certificate-serial-number
Syntax Description
Syntax DescriptionSyntax Description
Defaults
This command has no default values.
Command Modes
The following table shows the modes in which you can enter the command:
Certificate chain configuration
•
•
•
•
•
Command History
Usage Guidelines
A certificate authority (CA) is an authority in a network that issues and manages security credentials and public key for message encryption. As part of a public key infrastructure, a CA checks with a registration authority (RA) to verify information provided by the requestor of a digital certificate. If the RA verifies the requestor's information, the CA can then issue a certificate.
Examples
This example enters ca trustpoint mode for a trustpoint named central, then enters crypto ca certificate chain mode for central, and adds a CA certificate with a serial number 29573D5FF010FE25B45:
hostname(config)# crypto ca trustpoint centralhostname(ca-trustpoint)# crypto ca certificate chain centralhostname(ca-cert-chain)# certificate ca 29573D5FF010FE25B4530820345 308202EF A0030201 02021029 572A3FF2 96EF854F D0D6732F E25B45300D06092A 864886F7 0D010105 05003081 8F311630 1406092A 864886F7 0D01090116076140 622E636F 6D310B30 09060355 04061302 55533116 30140603 550408130D6D6173 73616368 75736574 74733111 300F0603 55040713 08667261 6E6B6C696E310E30 0C060355 040A1305 63697363 6F310F30 0D060355 040B1306 726F6F746F75311C 301A0603 55040313 136D732D 726F6F74 2D736861 2D30362D 32303031301E170D 30313036 32363134 31313430 5A170D32 32303630 34313430 3133305A30818F31 16301406 092A8648 86F70D01 09011607 6140622E 636F6D31 0B30090603550406 13025553 31163014 06035504 08130D6D 61737361 63687573 657474733111300F 06035504 07130866 72616E6B 6C696E31 0E300C06 0355040A 1305636973636F31 0F300D06 0355040B 1306726F 6F746F75 311C301A 06035504 0313136D732D726F 6F742D73 68612D30 362D3230 3031305C 300D0609 2A864886 F70D010101050003 4B003048 024100AA 3EB9859B 8670A6FB 5E7D2223 5C11BCFE 48E6D3A8181643ED CF7E75EE E77D83DF 26E51876 97D8281E 9F58E4B0 353FDA41 29FC791B1E14219C 847D19F4 A51B7B02 03010001 A3820123 3082011F 300B0603 551D0F0404030201 C6300F06 03551D13 0101FF04 05300301 01FF301D 0603551D 0E04160414E0D412 3ACC96C2 FBF651F3 3F66C0CE A62AB63B 323081CD 0603551D 1F0481C53081C230 3EA03CA0 3A86386C 6461703A 2F2F7732 6B616476 616E6365 647372762F436572 74456E72 6F6C6C2F 6D732D72 6F6F742D 7368612D 30362D32 3030312E63726C30 3EA03CA0 3A863868 7474703A 2F2F7732 6B616476 616E6365 647372762F436572 74456E72 6F6C6C2F 6D732D72 6F6F742D 7368612D 30362D32 3030312E63726C30 40A03EA0 3C863A66 696C653A 2F2F5C5C 77326B61 6476616E 6365647372765C43 65727445 6E726F6C 6C5C6D73 2D726F6F 742D7368 612D3036 2D323030312E6372 6C301006 092B0601 04018237 15010403 02010130 0D06092A 864886F70D010105 05000341 0056221E 03F377B9 E6900BF7 BCB3568E ADBA146F 3B8A71F3DF9EB96C BB1873B2 B6268B7C 0229D8D0 FFB40433 C8B3CB41 0E4D212B 2AEECD77BEA3C1FE 5EE2AB6D 91quitRelated Commands
chain
To enable sending of a certificate chain, use the chain command in tunnel-group ipsec-attributes configuration mode. This action includes the root certificate and any subordinate CA certificates in the transmission. To return this command to the default, use the no form of this command.
chain
no chain
Syntax Description
This command has no arguments or keywords.
Defaults
The default setting for this command is disabled.
Command Modes
The following table shows the modes in which you can enter the command:
Tunnel-group ipsec attributes configuration
•
—
•
—
—
Command History
Usage Guidelines
You can apply this attribute to all tunnel-group types.
Examples
The following example entered in config-ipsec configuration mode, enables sending a chain for an IPSec LAN-to-LAN tunnel group with the IP address of 209.165.200.225, which includes the root certificate and any subordinate CA certificates:
hostname(config)# tunnel-group 209.165.200.225 type IPSec_L2Lhostname(config)# tunnel-group 209.165.200.225 ipsec-attributeshostname(config-ipsec)# chainhostname(config-ipsec)#Related Commands
changeto
To change between security contexts and the system, use the changeto command in privileged EXEC mode.
changeto {system | context name}
Syntax Description
context name
Changes to the context with the specified name.
system
Changes to the system execution space.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
—
•
•
Command History
Usage Guidelines
If you log into the system execution space or the admin context, you can change between contexts and perform configuration and monitoring tasks within each context. The "running" configuration that you edit in configuration mode, or that is used in the copy or write commands, depends on which execution space you are in. When you are in the system execution space, the running configuration consists only of the system configuration; when you are in a context execution space, the running configuration consists only of that context. For example, you cannot view all running configurations (system plus all contexts) by entering the show running-config command. Only the current configuration appears.
Examples
The following example changes between contexts and the system in privileged EXEC mode:
hostname/admin# changeto systemhostname# changeto context customerAhostname/customerA#The following example changes between the system and the admin context in interface configuration mode. When you change between execution spaces, and you are in a configuration submode, the mode changes to the global configuration mode in the new execution space.
hostname(config-if)# changeto context adminhostname/admin(config)#Related Commands
checkheaps
To configure checkheaps verification intervals, use the checkheaps command in global configuration mode. To set the value to the default, use the no form of this command. Checkheaps is a periodic process that verifies the sanity of the heap memory buffers (dynamic memory is allocated from the system heap memory region) and the integrity of the code region.
checkheaps {check-interval | validate-checksum} seconds
no checkheaps {check-interval | validate-checksum} [seconds]
Syntax Description
Defaults
The default intervals are 60 seconds each.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
—
•
Command History
Examples
The following example sets the buffer allocation interval to 200 seconds and the code space checksum interval to 500 seconds:
hostname(config)# checkheaps check-interval 200hostname(config)# checkheaps validate-checksum 500Related Commands
check-retransmission
To prevent against TCP retransmission style attacks, use the check-retransmission command in tcp-map configuration mode. To remove this specification, use the no form of this command.
check-retransmission
no check-retransmission
Syntax Description
This command has no arguments or keywords.
Defaults
The default is disabled.
Command Modes
The following table shows the modes in which you can enter the command:
Tcp-map configuration
•
•
•
•
—
Command History
Usage Guidelines
The tcp-map command is used along with the Modular Policy Framework infrastructure. Define the class of traffic using the class-map command and customize the TCP inspection with tcp-map commands. Apply the new TCP map using the policy-map command. Activate TCP inspection with service-policy commands.
Use the tcp-map command to enter tcp-map configuration mode. To prevent against TCP retransmission style attacks that arise from end-system interpretation of inconsistent retransmissions, use the check-retransmission command in tcp-map configuration mode.
The security appliance will make efforts to verify if the data in retransmits are the same as the original. If the data doesn't match, then the connection is dropped by the security appliance. When this feature is enabled, packets on the TCP connection are only allowed in order. For more details, see the queue-limit command.
Examples
The following example enables the TCP check-retransmission feature on all TCP flows:
hostname(config)# access-list TCP extended permit tcp any anyhostname(config)# tcp-map tmaphostname(config-tcp-map)# check-retransmissionhostname(config)# class-map cmaphostname(config-cmap)# match access-list TCPhostname(config)# policy-map pmaphostname(config-pmap)# class cmaphostname(config-pmap)# set connection advanced-options tmaphostname(config)# service-policy pmap globalRelated Commands
checksum-verification
To enable or disable TCP checksum verification, use the checksum-verification command in tcp-map configuration mode. To remove this specification, use the no form of this command.
checksum-verification
no checksum-verification
Syntax Description
This command has no arguments or keywords.
Defaults
Checksum verification is disabled by default.
Command Modes
The following table shows the modes in which you can enter the command:
Tcp-map configuration
•
•
•
•
—
Command History
Usage Guidelines
The tcp-map command is used along with the Modular Policy Framework infrastructure. Define the class of traffic using the class-map command and customize the TCP inspection with tcp-map commands. Apply the new TCP map using the policy-map command. Activate TCP inspection with service-policy commands.
Use the tcp-map command to enter tcp-map configuration mode. Use the checksum-verification command in tcp-map configuration mode to enable TCP checksum verification. If the check fails, the packet is dropped.
Examples
The following example enables TCP checksum verification on TCP connections from 10.0.0.0 to 20.0.0.0:
hostname(config)# access-list TCP1 extended permit tcp 10.0.0.0 255.0.0.0 20.0.0.0 255.0.0.0hostname(config)# tcp-map tmaphostname(config-tcp-map)# checksum-verificationhostname(config)# class-map cmaphostname(config-cmap)# match access-list TCP1hostname(config)# policy-map pmaphostname(config-pmap)# class cmaphostname(config-pmap)# set connection advanced-options tmaphostname(config)# service-policy pmap globalRelated Commands
class (policy-map)
To assign a class-map to a policy for traffic classification, use the class command in policy-map mode. To remove a class-map specification for a policy map, use the no form of this command.
class classmap-name
no class classmap-name
Syntax Description
Defaults
By default, "class class-default" always exists at the end of a policy map.
Command Modes
The following table shows the modes in which you can enter the command:
Policy-map
•
•
•
•
—
Command History
Usage Guidelines
Including the class-default, up to 63 class commands can be configured in a policy map.
The name "class-default" is a reserved name for default class, and it always exists; that is, you can include it in your configuration, but you cannot reconfigure or remove it using CLI. See the description of the class-map command for more information.
Use the class command to enter class mode, in which you can enter the following commands:
set connection
inspect
ips
priority
police
See the individual command descriptions for detailed information.
Examples
The following is an example of the class command in policy-map mode; note the change in the prompt:
hostname(config)# class-map localclass1hostname(config-cmap)# match anyhostname(config-cmap)# exithostname(config)# policy-map localpolicy1hostname(config-pmap)# class localclass1hostname(config-pmap-c)# priorityhostname(config-pmap-c)# exitThe following is an example of a policy-map command, with its class commands, for a connection policy that limits connections to an HTTP server to a maximum of 256:
hostname(config)# access-list myhttp permit tcp any host 10.1.1.1hostname(config)# class-map myhttphostname(config-cmap)# match access-list myhttphostname(config-cmap)# exithostname(config)# policy-map global-policyhostname(config-pmap)# description This policy map defines a policy concerning connection to http server.hostname(config-pmap)# class myhttphostname(config-pmap-c)# set connection conn-max 256The following is an example of a policy-map command, with its class commands, for the outside interface (defined in the service-policy command). The class-map command specifies a class of traffic that has a destination IP address of 192.168.10.10:
hostname(config)# class-map outside-voiphostname(config-cmap)# match dscp af11hostname(config-cmap)# exithostname(config)# policy-map outside-policyhostname(config-pmap)# description This policy map defines policies for the outside interface.hostname(config-pmap)# class outside-voiphostname(config-pmap-c)# priorityhostname(config-pmap-c)# exithostname(config-pmap)# exithostname(config)# service-policy outside-policy interface outsideRelated Commands
class-map
To classify traffic for an interface when using Modular Policy Framework to configure a security feature, use the class-map command in global configuration mode. To delete a class map, use the no form of this command.
class-map class_map_name
no class-map class_map_name
Syntax Description
Defaults
The default class, class-default, always exists and cannot be configured or removed using the CLI. A default class, when used in a policy map, means "all other traffic.". The definition of class-default is:
class-map class-defaultmatch anyCommand Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Usage Guidelines
The class-map command allows you to define a traffic class when using Modular Policy Framework to configure a security feature. Modular Policy Framework provides a consistent and flexible way to configure security appliance features in a manner similar to Cisco IOS software QoS CLI. Use the class-map, policy-map, and service-policy global configuration commands to configure a security feature using Modular Policy Framework.
Define a traffic class using the class-map global configuration command. Then create a policy map by associating the traffic class with one or more actions using the policy-map global configuration command. Finally, create a security policy by associating the policy map with one or more interfaces using the service-policy command.
A traffic class map contains, at most, one match command (with the exception of the match tunnel-group and match default-inspection-traffic commands). The match command identifies the traffic included in the traffic class. When a packet is matched against a class-map, the match result is either a match or a no match.
Use the class-map command to enter class-map configuration mode. From class-map configuration mode, you can define the traffic to include in the class using the match command. The following commands are available in class-map configuration mode:
Examples
The following example shows how to define a traffic class of all TCP traffic to port 21 using a class map:
hostname(config)# class-map ftp-porthostname(config-cmap)# match port tcp eq 21Related Commands
clear aaa local user fail-attempts
To reset the number of failed user authentication attempts to zero without modifying the user's locked-out status, use the clear aaa local user fail-attempts command in privileged EXEC mode.
clear aaa local user authentication fail-attempts {username name | all}
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Usage Guidelines
Use this command when a user fails authentication a few times, but you want to reset to counter to zero, for example, when the configuration has recently been modified.
After the configured number of failed authentication attempts, the user is locked out of the system and cannot successfully log in until either a system administrator unlocks the username or the system reboots.
The number of failed attempts resets to zero and the lockout status resets to No when the user successfully authenticates or when the security appliance reboots.
Locking or unlocking a username results in a syslog message.
A system administrator with a privilege level of 15 cannot be locked out.
Examples
The following example shows use of the clear aaa local user authentication fail-attempts command to reset the failed-attempts counter to 0 for the username anyuser:
hostname(config)# clear aaa local user authentication fail-attempts username anyuserhostname(config)#The following example shows use of the clear aaa local user authentication fail-attempts command to reset the failed-attempts counter to 0 for all users:
hostname(config)# clear aaa local user authentication fail-attempts allhostname(config)#Related Commands
clear aaa local user lockout
To clear the lockout status of the specified users and set their failed-attempts counter to 0, use the clear aaa local user lockout command in privileged EXEC mode.
clear aaa local user lockout {username name | all}
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Usage Guidelines
You can specify a single user by using the username option or all users with the all option.
This command affects only the status of users that are locked out.
The administrator cannot be locked out of the device.
Locking or unlocking a username results in a syslog message.
Examples
The following example shows use of the clear aaa local user lockout command to clear the lockout condition and reset the failed-attempts counter to 0 for the username anyuser:
hostname(config)# clear aaa local user lockout username anyuserhostname(config)#Related Commands
clear aaa-server statistics
To reset the statistics for AAA servers, use the clear aaa-server statistics command in privilged EXEC mode.
clear aaa-server statistics [LOCAL | groupname [host hostname] | protocol protocol]
Syntax Description
Defaults
Remove all AAA-server statistics across all groups.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
7.0
This command was modified to adhere to CLI guidelines. In the protocol values, nt replaces the older nt-domain, and sdi replaces the older rsa-ace.
Examples
The following command shows how to reset the AAA statistics for a specific server in a group:
hostname(config)# clear aaa-server statistics svrgrp1 host 1.2.3.4The following command shows how to reset the AAA statistics for an entire server group:
hostname(config)# clear aaa-server statistics svrgrp1The following command shows how to reset the AAA statistics for all server groups:
hostname(config)# clear aaa-server statisticsThe following command shows how to reset the AAA statistics for a particular protocol (in this case, TACACS+):
hostname(config)# clear aaa-server statistics protocol tacacs+Related Commands
clear access-group
To remove access groups from all the interfaces, use the clear access-group command.
clear access-group
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Examples
The following example shows how to remove all access groups:
hostname(config)# clear access-groupRelated Commands
access-group
Binds an access list to an interface.
show running-config access-group
Displays the current access group configuration.
clear access-list
To clear an access-list counter, use the clear access-list command in global configuration mode.
clear access-list [id] counters
Syntax Description
Defaults
All the access list counters are cleared.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Usage Guidelines
When you enter the clear access-list command, all the access list counters are cleared if you do not specify an id.
Examples
The following example shows how to clear a specific access list counter:
hostname# clear access-list inbound countersRelated Commands
clear arp statistics
To clear ARP statistics, use the clear arp statistics command in privileged EXEC mode.
clear arp statistics
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Examples
The following example clears all ARP statistics:
hostname# clear arp statisticsRelated Commands
clear asp drop
To clear accelerated security path drop statistics, use the clear asp drop command in privileged EXEC mode.
clear asp drop [flow type | frame type]
Syntax Description
Defaults
By default, this command clears all drop statistics.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Usage Guidelines
Process types include the following:
acl-dropaudit-failureclosed-by-inspectionconn-limit-exceededfin-timeoutflow-reclaimedfo-primary-closedfo-standbyfo_rep_errhost-removedinspect-failips-fail-closeips-requestipsec-spoof-detectloopbackmcast-entry-removedmcast-intrf-removedmgmt-lockdownnat-failednat-rpf-failedneed-ikeno-ipv6-ipsecnon_tcp_synout-of-memoryparent-closedpinhole-timeoutrecursereinject-puntreset-by-ipsreset-inreset-ooutshunnedsyn-timeouttcp-finstcp-intecept-no-responsetcp-intercept-killtcp-intercept-unexpectedtcpnorm-invalid-syntcpnorm-rexmit-badtcpnorm-win-variationtimeouttunnel-pendingtunnel-torn-downxlate-removedExamples
The following example clears all drop statistics:
hostname# clear asp dropRelated Commands
clear asp table
To clear the hit counters either in asp arp or classify tables, or both, use the clear asp table command in privileged EXEC mode.
clear asp table [arp | classify]
Syntax Description
arp
clears the hits counters in asp arp table only.
classify
clears the hits counters in asp classify tables only
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Usage Guidelines
There are only two options arp and classify having hits in the clear asp table command
Examples
The following example clears all drop statistics:
hostname# clear asp tableWarning: hits counters in asp arp and classify tables are cleared, which might impact the hits statistic of other modules and output of other "show" commands! hostname#clear asp table arpWarning: hits counters in asp arp table are cleared, which might impact the hits statistic of other modules and output of other "show" commands! hostname#clear asp table classifyWarning: hits counters in classify tables are cleared, which might impact the hits statistic of other modules and output of other "show" commands! hostname(config)# clear asp tableWarning: hits counters in asp tables are cleared, which might impact the hits statistics of other modules and output of other "show" commands! hostname# sh asp table arpContext: single_vf, Interface: inside 10.1.1.11 Active 00e0.8146.5212 hits 0Context: single_vf, Interface: identity :: Active 0000.0000.0000 hits 0 0.0.0.0 Active 0000.0000.0000 hits 0Related Commands
show asp table arp
Shows the contents of the accelerated security path, which might help you troubleshoot a problem.
clear blocks
To reset the packet buffer counters such as the low watermark and history information, use the clear blocks command in privileged EXEC mode.
clear blocks
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
—
•
Command History
Usage Guidelines
Resets the low watermark counters to the current available blocks in each pool. Also clears the history information stored during the last buffer allocation failure.
Examples
The following example clears the blocks:
hostname# clear blocksRelated Commands
blocks
Increases the memory assigned to block diagnostics
show blocks
Shows the system buffer utilization.
clear capture
To clear the capture buffer, use the clear capture capture_name command.
clear capture capture_name
Syntax Description
Defaults
This command has no default settings.
Command Modes
The following table shows the modes in which you can enter the command:
Priveleged Mode
·
·
·
·
·
Command History
Usage Guidelines
The shortened form of the clear capture (for example, cl cap or clear cap) is not supported to prevent accidental destruction of all the packet captures.
Examples
This example shows how to clear the capture buffer for the capture buffer "trudy":
hostname(config)# clear capture trudyRelated Commands
capture
Enables packet capture capabilities for packet sniffing and network fault isolation.
show capture
Displays the capture configuration when no options are specified.
clear configure
To clear the running configuration, use the clear configure command in global configuration mode.
clear configure {primary | secondary | all | command}
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
When you enter this command in a security context, you clear only the context configuration. If you enter this command in the system execution space, you clear the system running configuration as well as all context running configurations. Because you cleared all context entries in the system configuration (see the context command), the contexts are no longer running, and you cannot change to a context execution space.
Before clearing the configuration, make sure you save any changes to the boot config command (which specifies the startup configuration location) to the startup configuration; if you changed the startup configuration location only in the running configuration, then when you restart, the configuration loads from the default location.
Examples
The following example clears the entire running configuration:
hostname(config)# clear configure allRelated Commands
clear configure aaa
To clear the aaa configuration, use the clear configure aaa command in global configuration mode. The clear configure aaa command removes the AAA command statements from the configuration.
clear configure aaa
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Usage Guidelines
This command also resets the AAA parameters to their default values, if any.
There is no undo.
Examples
hostname(config)# clear configure aaaRelated Commands
clear configure aaa-server
To remove all AAA server groups or to clear the specified group, use the clear configure aaa-server command in global configuration mode.
clear configure aaa-server [server-tag]
clear configure aaa-server [server-tag] host server-ip
Syntax Description
server-ip
The IP address of the AAA server.
server-tag
(Optional) Symbolic name of the server group to be cleared.
Defaults
Remove all AAA server groups.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
—
—
•
Command History
Usage Guidelines
You can specify a particular AAA server group or, by default, all AAA server groups.
Use the host keyword to specify a particular server within a server group.
This command also resets the AAA server parameters to their default values, if any.
Examples
hostname(config)# aaa-server svrgrp1 protocol sdihostname(config)# aaa-server svrgrp1 host 1.2.3.4hostname(config-aaa-server)# timeout 9hostname(config-aaa-server)# retry 7hostname(config-aaa-server)# sdi-version sdi-5hostname(config-aaa-server)# exitGiven the preceding configuration, the following command shows how to remove a specific server from a group:
hostname(config)# clear config aaa-server svrgrp1 host 1.2.3.4The following command shows how to remove a server group:
hostname(config)# clear config aaa-server svrgrp1The following command shows how to remove all server groups:
hostname(config)# clear config aaa-serverRelated Commands
clear configure access-group
To remove access groups from all the interfaces, use the clear configure access-group command.
clear configure access-group
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Examples
The following example shows how to remove all access groups:
hostname(config)# clear configure access-groupRelated Commands
access-group
Binds an access list to an interface.
show running-config access-group
Displays the current access group configuration.
clear configure access-list
To clear an access list from the running configuration, use the clear configure access list command in global configuration mode.
clear configure access-list [id]
Syntax Description
Defaults
All the access lists are cleared from the running configuration.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Usage Guidelines
The clear configure access-list command automatically unbinds an access list from a crypto map command or interface. The unbinding of an access list from a crypto map command can lead to a condition that discards all packets because the crypto map commands referencing the access list are incomplete. To correct the condition, either define other access-list commands to complete the crypto map commands or remove the crypto map commands that pertain to the access-list command. Refer to the crypto map client command for more information.
Examples
This example shows how to clear the access lists from the running configuration:
hostname(config)# clear configure access-listRelated Commands
clear configure alias
To remove all alias commands from the configuration, use the clear configure alias command in global configuration mode.
clear configure alias
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
•
•
Command History
Examples
This example shows how to remove all alias commands from the configuration:
hostname(config)# clear configure aliasRelated Commands
alias
Translates one address into another.
show running-config alias
Displays the overlapping addresses with dual NAT commands in the configuration.
clear configure arp-inspection
To clear the ARP inspection configuration, use the clear configure arp-inspection command in global configuration mode.
clear configure arp-inspection
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
—
•
•
•
—
Command History
Examples
The following example clears the ARP inspection configuration:
hostname# clear configure arp-inspectionRelated Commands
clear configure asdm
To remove all asdm commands from the running configuration, use the clear configure asdm command in global configuration mode.
clear configure asdm [location | group | image]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
7.0
This command was changed from the clear pdm command to the clear configure asdm command.
Usage Guidelines
To view the asdm commands in the running configuration, use the show running-config asdm command.
Clearing the asdm image command from the configuration disables ASDM access. Clearing the asdm location and asdm group commands from the configuration causes ASDM to regenerate those commands the next time ASDM is accessed, but may disrupt active ASDM sessions.
Note
Examples
The following example clears the asdm group commands from the running configuration:
hostname(config)# clear configure asdm grouphostname(config)#Related Commands
clear configure auth-prompt
To remove the previously specified authentication prompt challenge text and revert to the default value, if any, use the clear configure auth-prompt command in global configuration mode.
clear configure auth-prompt
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
—
—
•
Command History
Usage Guidelines
After you clear the authentication prompt, the prompt users see when they log in depends on the protocol they use:
•
•
•
Examples
This example shows how to clear the auth-prompt:
hostname(config)# clear configure auth-promptRelated Commands
auth-prompt
Sets the user authorization prompts.
show running-config auth-prompt
Displays the user authorization prompts.
clear configure banner
To remove all the banners, use the clear configure banner command in global configuration mode.
clear configure banner
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Examples
This example shows how to clear banners:
hostname(config)# clear configure bannerRelated Commands
banner
Configures the session, login, or message-of-the-day banner.
show running-config banner
Displays all banners.
clear configure ca certificate map
To remove all certificate map entries or to remove a specified certificate map entry, use the clear configure ca configurate map command in global configuration mode.
clear configure ca certificate map [sequence-number]
Syntax Description
sequence-number
(Optional) Specifies a number for the certificate map rule you are removing. The range is 1 through 65535.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command
Global configuration
•
•
•
•
:
Command History
Examples
The following example removes all certificate map entries.
hostname(config)# clear configure ca certificate maphostname(config)#Related Commands
+
clear configure class-map
To remove all class maps, use the clear configure class-map command in global configuration mode.
clear configure class-map
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Usage Guidelines
To clear the class map for a specific class map name, use the no form of the class-map command.
Examples
The following example shows how to clear all configured class-maps:
hostname(config)# clear configure class-map
Related Commands
class-map
Applies a traffic class to an interface.
show running-config class-map
Displays the information about the class map configuration.
clear configure clock
To clear the clock configuration, use the clear configure clock command in global configuration mode.
clear configure clock
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
—
•
Command History
Usage Guidelines
This command clears all clock configuration commands. The clock set command is not a configuration command, so this command does not reset the clock. To reset the clock, you need to set a new time for the clock set command.
Examples
The following example clears all clock commands:
hostname# clear configure clockRelated Commands
clock set
Manually sets the time.
clock summer-time
Sets the date range to show daylight savings time.
clock timezone
Sets the time zone.
clear configure command-alias
To remove all non-default command aliases, use the clear configure command-alias command in global configuration mode.
clear configure command-alias
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
This command has no usage guidelines.
Examples
The following example shows how to remove all non-default command aliases:
hostname(config)# clear configure command-aliasRelated Commands
command-alias
Creates a command alias.
show running-config command-alias
Displays all non-default command aliases.
clear configure console
To reset the console connection settings to defaults, use the clear configure console command in global configuration mode.
clear configure console
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Examples
The following example shows how to reset the console connection settings to defaults:
hostname(config)# clear configure consoleRelated Commands
clear configure context
To clear all context configurations in the system configuration, use the clear configure context command in global configuration mode.
clear configure context [noconfirm]
Syntax Description
noconfirm
(Optional) Removes all contexts without prompting you for confirmation. This option is useful for automated scripts.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
—
—
•
Command History
Usage Guidelines
This command lets you remove all contexts, including the admin context. The admin context cannot be removed using the no context command, but can be removed using the clear configure context command.
Examples
The following example removes all contexts from the system configuration, and does not confirm the deletion:
hostname(config)# clear configure context noconfirmRelated Commands
clear configure crypto
To remove the entire crypto configuration, including IPSec, crypto maps, dynamic crypto maps, CA trstpoints, all certificates, certificate map configurations, and ISAKMP, use the clear configure crypto command in global configuration. To remove specific configurations, use this command with keywords as shown in the syntax. Take caution when using this command.
clear configure crypto [ca | dynamic-map | ipsec | iskmp | map]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example issued in global configuration mode, removes all of the crypto configuration from the security appliance:
hostname(config)# clear configure cryptohostname(config)#Related Commands
clear configure crypto ca trustpoint
To remove all trustpoints from the configuration, use the clear configure crypto ca trustpoint command in global configuration.
clear configure crypto ca trustpoint
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example entered in global configuration mode, removes all trustpoints from the configuration:
hostname(config)# clear configure crypto ca trustpointhostname(config)#Related Commands
crypto ca trustpoint
Enters the trustpoint subconfiguration level for the indicated trustpoint.
clear configure crypto dynamic-map
To remove all or specified crypto dynamic maps from the configuration, use the clear configure crypto dynamic-map command in global configuration.
clear configure crypto dynamic-map dynamic-map-name dynamic-seq-num
Syntax Description
dynamic-map-name
Specifies the name of a specific crypto dynamic map.
dynamic-seq-num
Specifies the sequence number of the crypto dynamic map.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example entered in global configuration mode, removes the crypto dynamic map mymaps with sequence number 3 from the configuration:
hostname(config)# clear configure crypto dynamic-map mymaps 3hostname(config)#Related Commands
clear configure crypto map
To remove all or specified crypto maps from the configuration, use the clear configure crypto map command in global configuration.
clear configure crypto map map-name seq-num
Syntax Description
map-name
Specifies the name of a specific crypto map.
seq-num
Specifies the sequence number of the crypto map.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example entered in global configuration mode, removes the crypto map mymaps with sequence number 3 from the configuration:
hostname(config)# clear configure crypto map mymaps 3hostname(config)#Related Commands
clear configure dhcpd
To clear all of the DHCP server commands, binding, and statistics, use the clear configure dhcpd command in global configuration mode.
clear configure dhcpd
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Usage Guidelines
The clear configure dhcpd command clears all of the dhcpd commands, bindings, and statistical information. To clear only the statistic counters or binding information, use the clear dhcpd command.
Examples
The following example shows how to clear all dhcpd commands:
hostname(config)# clear configure dhcpdRelated Commands
clear dhcpd
Clears the DHCP server bindings and statistic counters.
show running-config dhcpd
Displays the current DHCP server configuration.
clear configure dhcprelay
To clear all of the DHCP relay configuration, use the clear configure dhcprelay command in global configuration mode.
clear configure dhcprelay
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
•
—
Command History
7.0
This command was changed from clear dhcprelay to clear configure dhcprelay.
Usage Guidelines
The clear configure dhcprelay command clears the DHCP relay statistics and configuration. To clear only the DHCP statistic counters, use the clear dhcprelay statistics command.
Examples
The following example shows how to clear the DHCP relay configuration:
hostname(config)# clear configure dhcprelayRelated Commands
clear configure dns
To clear all DNS commands, use the clear configure dns command in global configuration mode.
clear configure dns
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Examples
The following example clears all DNS commands:
hostname(config)# clear configure dnsRelated Commands
show running-config dns-server-group
Shows the currently running DNS configuration.
clear configure established
To remove all established commands, use the clear configure established command in global configuration mode.
clear configure established
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
To remove an established connection created by the established command, enter the clear xlate command.
Examples
This example shows how to remove established commands:
hostname(config)# clear configure establishedRelated Commands
clear configure failover
To remove failover commands from the configuration and restore the defaults, use the clear configure failover command in global configuration mode.
clear configure failover
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
This command clears all failover commands from the running configuration and restores the defaults. If you use the all keyword with the show running-config failover command, you will see the default failover configuration.
The clear configure failover command is not available in a security context in multiple configuration mode; you must enter the command in the system execution space.
Examples
The following example clears all failover commands from the configuration:
hostname(config)# clear configure failoverhostname(config)# show running-configuration failoverno failoverRelated Commands
show running-config failover
Displays the failover commands in the running configuration.
clear configure filter
To clear URL, FTP, and HTTPS filtering configuration, use the clear configure filter command in global configuration mode.
clear configure filter
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
The clear configure filter command clears the URL, FTP, and HTTPS filtering configuration.
Examples
The following example clears the URL, FTP, and HTTPS filtering configuration:
hostname# clear configure filterRelated Commands
clear configure fips
To clear the system or module FIPS configuration information stored in NVRAM, use the clear configure fips command.
clear configure fips
Syntax Description
Defaults
This command has no default settings.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
—
—
•
—
—
Command History
Examples
sw8-ASA(config)# clear configure fipsRelated Commands
clear configure firewall
To set the firewall mode to the default routed mode, use the clear configure firewall command in global configuration mode.
clear configure firewall
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
—
•
Command History
Examples
The following example sets the firewall mode to the default:
hostname(config)# clear configure firewallRelated Commands
clear configure fixup
To clear the fixup configuration, use the clear configure fixup command in global configuration mode.
clear configure fixup
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
·
·
·
·
·
Command History
Usage Guidelines
The clear configure fixup command removes the fixup configuration.
Examples
The following example clears the fixup configuration:
hostname# clear configure fixupRelated Commands
class-map
Defines the traffic class to which to apply security actions.
policy-map
Associates a class map with specific security actions.
clear configure fragment
To reset all the IP fragment reassembly configurations to defaults, use the clear configure fragment command in global configuration mode.
clear configure fragment [interface]
Syntax Description
Defaults
If an interface is not specified, the command applies to all interfaces.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Usage Guidelines
The clear configure fragment command resets all the IP fragment reassembly configurations to defaults. In addition, the the chain, size, and timeout keywords are reset to their default values, which are as follows:
•
•
•
Examples
This example shows how to reset all the IP fragment reassembly configurations to defaults:
hostname(config)# clear configure fragmentRelated Commands
clear configure ftp
To clear the FTP configuration, use the clear configure ftp command in global configuration mode.
clear configure ftp
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
The clear configure ftp command clears the FTP configuration.
Examples
The following example clears the FTP configuration:
hostname# clear configure filterRelated Commands
clear configure ftp-map
To clear the FTP map configuration, use the clear configure ftp-map command in global configuration mode.
clear configure ftp-map
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
The clear configure ftp-map command removes the FTP map configuration.
Examples
The following example clears the FTP map configuration:
hostname# clear configure ftp-mapRelated Commands
clear configure global
To remove the global commands from the configuration, use the clear configure global command in global configuration mode.
clear configure global
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
•
—
Command History
Examples
The following example shows how to remove the global commands from the configuration:
hostname(config)# clear configure globalRelated Commands
global
Creates entries from a pool of global addresses.
show running-config global
Displays the global commands in the configuration.
clear configure group-policy
To remove the configuration for a particular group policy, use the clear configure group-policy command in global configuration mode, and append the name of the group policy. To remove all group-policy commands from the configuration except the default group policy, use this command without arguments.
clear configure group-policy [name]
Syntax Description
Defaults
Remove all group-policy commands from the configuration, except the default group policy.
Command Modes
The following table shows the modes in which you can enter the command:
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example shows how to clear the configuration for the group policy named FirstGroup.
hostname(config)# clear configure group-policy FirstGroupRelated Commands
clear configure gtp-map
To clear GTP map configuration, use the clear configure gtp-map command in global configuration mode.
clear configure gtp-map
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
The clear configure gtp -map command removes the GTP map configuration.
Examples
The following example clears GTP map configuration:
hostname# clear configure gtp-mapRelated Commands
clear configure http
To disable the HTTP server and to remove configured hosts that can access the HTTP server, use the clear configure http command in global configuration mode.
clear configure http
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example shows how to clear the HTTP configuration.
hostname(config)# clear configure httpRelated Commands
clear configure http-map
To clear HTTP map configuration, use the clear configure http-map command in global configuration mode.
clear configure http-map
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
·
·
·
·
·
Command History
Usage Guidelines
The clear configure http-map command removes the HTTP map configuration.
Examples
The following example clears the HTTP map configuration:
hostname# clear configure http-mapRelated Commands
clear configure icmp
To clear the configured access rules for ICMP traffic, use the clear configure icmp command in global configuration mode.
clear configure icmp
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
The clear configure icmp command clears the configured access rules for ICMP traffic.
Examples
The following example clears the clear configured access rules for ICMP traffic:
hostname# clear configure icmpRelated Commands
clear configure imap4s
To remove all IMAP4S commands from the configuration, reverting to default values, use the clear configure imap4s command in global configuration mode.
clear configure imap4s
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example shows how to remove the IMAP4S configuration:
hostname(config)# clear configure imap4shostname(config)#Related Commands
show running-config imap4s
Displays the running configuration for IMAP4S.
imap4s
Creates or edits an IMAP4S e-mail proxy configuration.
clear configure interface
To clear the interface configuration, use the clear configure interface command in global configuration mode.
clear configure interface [physical_interface[.subinterface] | mapped_name | interface_name]
Syntax Description
Defaults
If you do not specify an interface, the security appliance clears all interface configuration.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
7.0
This command was changed from clear interface. This command was also modified to include the new interface numbering scheme.
Usage Guidelines
When you clear the interface configuration for main physical interfaces, the security appliance uses the default settings.
You cannot use the interface name in the system execution space, because the nameif command is only available within a context. Similarly, if you mapped the interface ID to a mapped name using the allocate-interface command, you can only use the mapped name in a context.
Examples
The following example clears the GigabitEthernet0/1 configuration:
hostname(config)# clear configure interface gigabitethernet0/1The following example clears the inside interface configuration:
hostname(config)# clear configure interface insideThe following example clears the int1 interface configuration in a context. "int1" is a mapped name.
hostname/contexta(config)# clear configure interface int1The following example clears all interface configuration.
hostname(config)# clear configure interfaceRelated Commands
clear configure ip
To clear all IP addresses set by the ip address command, use the clear configure ip command in global configuration mode.
clear configure ip
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Usage Guidelines
In transparent firewall mode, this command clears the management IP address.
If you want to stop all current connections that use the old IP addresses, enter the clear xlate command. Otherwise, the connections time out as usual.
Examples
The following example clears all IP addresses:
hostname(config)# clear configure ipRelated Commands
clear configure ip audit
To clear the entire audit policy configuration, use the clear configure ip audit command in global configuration mode.
clear configure ip audit [configuration]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Examples
The following example clears all ip audit commands:
hostname# clear configure ip auditRelated Commands
clear configure ip local pool
To remove IP address pools, use the clear configure ip local pool command in global configuration mode.
clear ip local pool [poolname]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example removes all IP address pools from the running configuration:
hostname(config)# clear config ip local poolhostname(config)#Related Commands
clear configure ip local pool
Removes all ip local pools.
ip local pool
Configures an IP address pool.
clear configure ip verify reverse-path
To clear the ip verify reverse-path configuration, use the clear configure ip verify reverse-path command in global configuration mode.
clear configure ip verify reverse-path
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
•
—
Command History
Examples
The following example clears the ip verify reverse-path configuration for all interfaces:
hostname(config)# clear configure ip verify reverse-pathRelated Commands
clear configure ipv6
To clear the global IPv6 commands from the running configuration, use the clear configure ipv6 command in global configuration mode.
clear configure ipv6 [route | access-list]
Syntax Description
Defaults
Without keywords, this command clears all IPv6 commands from the running configuration.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
•
—
Command History
Usage Guidelines
This command only clears the global IPv6 commands from the running configuration; it does not clear the IPv6 commands entered in interface configuration mode.
Examples
The following example shows how to clear statically defined IPv6 routes from the IPv6 routing table:
hostname(config)# clear configure ipv6 routehostname(config)#Related Commands
clear configure isakmp
To remove all of the ISAKMP configuration, use the clear configure isakmp command in global configuration mode.
clear configure isakmp
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example issued in global configuration mode, removes all of the ISAKMP configuration from the security appliance:
hostname(config)# clear configure isakmphostname(config)#Related Commands
clear configure isakmp policy
To remove all of the ISAKMP policy configuration, use the clear configure isakmp policy command in global configuration mode.
clear configure isakmp policy priority
Syntax Description
Defaults
No default behaviour or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example removes the ISAKMP policy with priority 3 from the configuration:
hostname(config)# clear configure isakmp policy 3hostname(config)#Related Commands
clear configure logging
To clear the logging configuration, use the clear configure logging command in global configuration mode.
clear configure logging [disabled | level | rate-limit]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
You can use the show running-config logging command to view all logging configuration. If you use the clear configure logging command without either the disabled or level keyword, all logging configuration is cleared.
Examples
The following example shows how to clear logging configuration. The output of the show logging command indicates that all logging features are disabled.
hostname(config)# clear configure logginghostname(config)# show loggingSyslog logging: disabledFacility: 20Timestamp logging: disabledStandby logging: disabledDeny Conn when Queue Full: disabledConsole logging: disabledMonitor logging: disabledBuffer logging: disabledTrap logging: disabledHistory logging: disabledDevice ID: disabledMail logging: disabledASDM logging: disabledRelated Commands
show logging
Displays the enabled logging options.
show running-config logging
Displays the logging-related portion of the running configuration.
clear configure mac-address-table
To clear the mac-address-table static and mac-address-table aging-time configuration, use the clear configure mac-address-table command in global configuration mode.
clear configure mac-address-table
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
—
•
•
•
—
Command History
Examples
The following example clears the mac-address-table static and mac-address-table aging-time configuration:
hostname# clear configure mac-address-tableRelated Commands
clear configure mac-learn
To clear the mac-learn configuration, use the clear configure mac-learn command in global configuration mode.
clear configure mac-learn
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
—
•
•
•
—
Command History
Examples
The following example clears the mac-learn configuration:
hostname# clear configure mac-learnRelated Commands
clear configure mac-list
To remove the indicated list of MAC addresses, previously specified the mac-list command, use the clear configure mac-list command in global configuration mode:
clear configure mac-list id
Syntax Description
Defaults
No default behaviors or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
—
—
•
Command History
Usage Guidelines
To remove a list of MAC addresses, use the clear mac-list command.
Examples
The following example shows how to clear a MAC address list:
hostname(config)# clear configure mac-list firstmaclistRelated Commands
mac-list
Adds a list of MAC addresses using a first-match search.
show running-config mac-list
Displays the MAC addresses in the MAC address list indicated by the id value.
clear configure management-access
To remove the configuration of an internal interface for management access of the security appliance, use the clear configure management-access command in global configuration mode.
clear configure management-access
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
The management-access command lets you define an internal management interface using the IP address of the firewall interface specified in mgmt_if. (The interface names are defined by the nameif command and displayed in quotes, " ", in the output of the show interface command.) The clear configure management-access command removes the configuration of the internal management interface specified with the management-access command.
Examples
The following example removes the configuration of an internal interface for management access of the security appliance:
hostname(config)# clear configure management-accessRelated Commands
clear configure mgcp-map
To clear the MGCP map configuration, use the clear configure mgcp-map command in global configuration mode.
clear configure mgcp-map
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
The clear configure mgcp-map clears the MGCP map configuration.
Examples
The following example clears clear the MGCP map configuration:
hostname# clear configure mgcp-mapRelated Commands
clear configure mroute
To remove the mroute commands from the running configuration, use the clear configure mroute command in global configuration mode.
clear configure mroute
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example shows how to remove the mroute commands from the configuration:
hostname(config)# clear configure mroutehostname(config)#Related Commands
clear configure mtu
To clear the configured maximum transmission unit values on all interfaces, use the clear configure mtu command in global configuration mode.
clear configure mtu
Syntax Description
This command has no arguments or keywords.
Defaults
Using the clear configure mtu command sets the maximum transmission unit to the default of 1500 for all ethernet interfaces.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
—
•
•
•
—
Command History
Examples
The following example clears the current maximum transmission unit values on all interfaces:
hostname(config)# clear configure mtuRelated Commands
mtu
Specifies the maximum transmission unit for an interface.
show running-config mtu
Displays the current maximum transmission unit block size.
clear configure multicast-routing
To remove the multicast-routing command from the running configuration, use the clear configure multicast-routing command in global configuration mode.
clear configure multicast-routing
Syntax Description
There are no keywords or arguments for this command.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Usage Guidelines
The clear configure multicast-routing command removes the multicast-routing from the running configuration. The no multicast-routing command also removes the multicast-routing command from the running configuration.
Examples
The following example shows how to remove the multicast-routing command from the running configuration:
hostname(config)# clear configure multicast-routingRelated Commands
clear configure name
To clear the list of names from the configuration, use the clear configure name command in global configuration mode.
clear configure name
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Usage Guidelines
This command has no usage guidelines.
Examples
The following example shows how to clear the name list:
hostname(config)# clear configure nameRelated Commands
name
Associates a name with an IP address.
show running-config name
Displays the list of names associated with IP addresses.
clear configure nat
To remove the NAT configuration, use the clear configure nat command in privileged EXEC mode.
clear configure nat
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
•
—
Command History
Usage Guidelines
The following applies to transparent firewall mode:
Note
Examples
The following example shows how to remove the NAT configuration:
hostname(config)# clear configure natRelated Commands
nat
Associates a network with a pool of global IP addresses.
show running-config nat
Displays a pool of global IP addresses that are associated with the network.
clear configure ntp
To clear the NTP configuration, use the clear configure ntp command in global configuration mode.
clear configure ntp
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
—
•
Command History
Examples
The following example clears all ntp commands:
hostname# clear configure ntpRelated Commands
clear configure object-group
To remove all the object group commands from the configuration, use the clear configure object-group command in global configuration mode.
clear configure object-group [{protocol | service | icmp-type | network}]
Syntax Description
icmp-type
(Optional) Clears all ICMP groups.
network
(Optional) Clears all network groups.
protocol
(Optional) Clears all protocol groups.
service
(Optional) Clears all service groups.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Examples
The following example shows how to remove all the object-group commands from the configuration:
hostname(config)# clear configure object-groupRelated Commands
clear configure passwd
To clear the login password configuration and restore the default setting of "cisco," use the clear configure passwd command in global configuration mode.
clear configure {passwd | password}
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Examples
The following example clears the login password and restores it to the default of "cisco":
hostname(config)# clear configure passwdRelated Commands
clear configure pim
To clear all of the global pim commands from the running configuration, use the clear configure pim command in global configuration mode.
clear configure pim
Syntax Description
There are no keywords or arguments for this command.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Usage Guidelines
The clear configure pim command clears all of the pim commands from the running configuration. To clear PIM traffic counters and topology information, use the clear pim counters and the clear pim topology commands.
The clear configure pim command only clears the pim commands entered in global configuration mode; it does not clear the interface-specific pim commands.
Examples
The following example shows how to clear all pim commands from the running configuration:
hostname(config)# clear configure pimRelated Commands
clear configure policy-map
To remove the policy-map specification from the configuration, use the clear configure policy-map command in global configuration mode.
clear configure policy-map
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Examples
This example shows the clear configure policy-map command:
hostname(config)# clear configure policy-mapRelated Commands
policy-map
Configures a policy; that is, an association of a traffic class and one or more actions.
show running-config policy-map
Displays the entire policy configuration.
clear configure pop3s
To remove all POP3S commands from the configuration, reverting to default values, use the clear configure pop3s command in global configuration mode.
clear configure pop3s
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example shows how to remove the POP3S configuration:
hostname(config)# clear configure pop3shostname(config)#Related Commands
show running-config pop3s
Displays the running configuration for POP3S.
pop3s
Creates or edits a POP3S e-mail proxy configuration.
clear configure port-forward
To remove a configured set of applications that WebVPN users access over forwarded TCP ports, use the clear configure port-forward command in global configuration mode. To remove all configured applications, use this command without the listname argument. To remove only the applications for a specific list, use this command with that listname.
clear configure port-forward [listname]
Syntax Description
listname
Groups the set of applications (forwarded TCP ports) WebVPN users can access. Maximum 64 characters.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example shows how to remove the portforwarding list called SalesGroupPorts.
hostname(config)# clear configure port-forward SalesGroupPortsRelated Commands
clear configure prefix-list
To remove the prefix-list commands from the running configuration, use the clear configure prefix-list command in global configuration mode.
clear configure prefix-list [prefix-list-name]
Syntax Description
prefix-list-name
(Optional) The name of a prefix list. When a prefix list name is specified, only the commands for that prefix list are removed from the configuration.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
7.0
This command was changed from clear prefix-list to clear configure prefix-list.
Usage Guidelines
The clear configure prefix-list command removes the prefix-list commands and the prefix-list description commands from the running configuration. If a prefix list name is specified, then the prefix-list command and prefix-list description command, if present, for that prefix list only are removed from the running configuration.
This command does not remove the no prefix-list sequence command from the running configuration.
Examples
The following example removes all prefix-list commands from the running configuration for a prefix list named MyPrefixList:
hostname# clear configure prefix-list MyPrefixListRelated Commands
show running-config prefix-list
Displays the prefix-list commands in the running configuration.
clear configure priority-queue
To remove the priority queue specification from the configuration, use the clear configure priority-queue command in global configuration mode.
clear configure priority queue interface-name
Syntax Description
interface-name
Specifies the name of the interface for which you want to show the priority queue details
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Examples
This example shows the use of the clear configure priority-queue command to remove the priority-queue configuration on the interface named test:
hostname(config)# clear configure priority-queue testRelated Commands
priority-queue
Configures priority queueing on an interface.
show running-config priority-queue
Displays the current priority-queue configuration for the named interface.
clear configure privilege
To remove the configured privilege levels for commands, use the clear configure privilege command in global configuration mode.
clear configure privilege
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Usage Guidelines
There is no undo.
Examples
This example shows how to reset the configured privilege levels for the commands:
hostname(config)# clear configure privilegeRelated Commands
privilege
Configures the command privilege levels.
show curpriv
Displays current privilege level
show running-config privilege
Displays privilege levels for commands.
clear configure rip
To clear the rip commands from the running configuration, use the clear configure rip command in global configuration mode.
clear configure rip
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Usage Guidelines
The clear configure rip command removes all rip commands from the configuration. Use the no form of the commands to clear specific commands.
Examples
The following example clears all RIP commands from the running configuration:
hostname(config)# clear configure ripRelated Commands
debug rip
Displays debug information for RIP.
rip
Configures RIP on the specified interface.
show running-config rip
Displays the RIP commands in the running configuration.
clear configure route
To remove the route commands from the configuration that do not contain the connect keyword, use the clear configure route command in global configuration mode.
clear configure route [interface_name ip_address [netmask gateway_ip]]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Usage Guidelines
Use 0.0.0.0 to specify a default route. You can abbreviate the 0.0.0.0 IP address as 0 and the 0.0.0.0 netmask as 0.
Examples
The following example shows how to remove the route commands from the configuration that do not contain the connect keyword:
hostname(config)# clear configure route
Related Commands
route
Specifies a static or default route for the an interface.
show route
Displays route information.
show running-config route
Displays configured routes.
clear configure route-map
To remove all of the route maps, use the clear configure route-map command in global configuration mode.
clear configure route-map
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Usage Guidelines
Use the clear configure route-map command in global configuration mode to remove all route-map commands in the configuration. The route-map command is used to configure conditions of redistributing the routes from one routing protocol into another routing protocol.
To remove individual route-map commands, use the no route-map command.
Examples
The following example shows how to remove the conditions of redistributing routes from one routing protocol into another routing protocol:
hostname(config)# clear configure route-map
Related Commands
clear configure router
To clear all router commands from the running configuration, use the clear configure router command in global configuration mode.
clear configure router [ospf id]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
7.0
This command was changed from the clear router command to the clear configure router command.
Examples
The following example clears all OSPF commands associated with OSPF process 1 from the running configuration:
hostname(config)# clear configure router ospf 1hostname(config)#Related Commands
show running-config router
Displays the commands in the global router configuration.
clear configure service-policy
To clear the service policy configuration for enabled policies, use the clear configure service-policy command in privileged EXEC mode.
clear configure service-policy
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
·
·
·
·
·
Command History
Examples
The following is an example of the clear service-policy command:
hostname(config)# clear configure service-policyRelated Commands
clear configure smtps
To remove all SMTPS commands from the configuration, reverting to default values, use the clear configure smtps command in global configuration mode.
clear configure smtps
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example shows how to remove the SMTPS configuration:
hostname(config)# clear configure smtpshostname(config)#Related Commands
show running-configuration smtps
Displays the running configuration for SMTPS.
smtps
Creates or edits an SMTPS e-mail proxy configuration
clear configure snmp-map
To clear the SNMP map configuration, use the clear configure snmp-map command in global configuration mode.
clear configure snmp-map
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
The clear configure snmp-map command removes the SNMP map configuration.
Examples
The following example clears the SNMP map configuration:
hostname# clear configure snmp-mapRelated Commands
clear configure snmp-server
To disable the Simple Network Management Protocol (SNMP) server, use the clear configure snmp-server command in global configuration mode.
clear configure snmp-server
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
·
·
·
·
·
Command History
Examples
This example shows how to disable the SNMP server:
hostname #clear snmp-serverRelated Commands
snmp-server
Provides the security appliance event information through SNMP.
show snmp-server statistics
Displays information about the SNMP server configuration.
clear configure ssh
To clear all SSH commands from the running configuration, use the clear configure ssh command in global configuration mode.
clear configure ssh
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
7.0
This command was changed from the clear ssh comma nd to the clear configure ssh comma nd.
Usage Guidelines
This command clears all SSH commands from the configuration. To clear specific commands, use the no form of those commands.
Examples
The following example clears all SSH commands from the configuration:
hostname(config)# clear configure sshRelated Commands
clear configure ssl
To remove all SSL commands from the configuration, reverting to default values, use the clear config ssl command in global configuration mode.
clear config ssl
Defaults
By default:
•
•
•
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Examples
The following example shows how to use the clear config ssl command:
hostname(config)# clear config sslRelated Commands
clear configure static
To remove all the static commands from the configuration, use the clear configure static command in global configuration mode.
clear configure static
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Examples
This example shows how to remove all the static commands from the configuration:
hostname(config)# clear configure staticRelated Commands
clear configure sunrpc-server
To clear the remote processor call services from the security appliance, use the clear configure sunrpc-server command in global configuration mode.
clear configure sunrpc-server [active]
Syntax Description
active
(Optional) Identifies the SunRPC services that are currently active on the security appliance.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
The sunrpc-server command displays the configured router ospf commands.
Note
Examples
The following example shows how to clear the SunRPC services from the security appliance:
hostname(config)# clear configure sunrpc-server active
Related Commands
sunrpc-server
Creates the SunRPC services table.
show running-config sunrpc-server
Displays the information about the SunRPC configuration.
clear configure sysopt
To clear the configuration for all sysopt commands, use the clear configure sysopt command in global configuration mode.
clear configure sysopt
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Examples
The following example clears all sysopt command configuration:
hostname(config)# clear configure sysoptRelated Commands
clear configure tcp-map
To clear tcp-map configuration, use the clear configure tcp-map command in global configuration mode.
clear configure tcp-map
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Examples
The following example shows how to clear the TCP map configuration:
hostname(config)# clear configure tcp-map
Related Commands
tcp-map
Creates a TCP map and allows access to tcp-map configuration mode.
show running-config tcp-map
Displays the information about the TCP map configuration.
clear configure telnet
To remove the Telnet connection and idle timeout from the configuration, use the clear configure telnet command in global configuration mode.
clear configure telnet
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Examples
This example shows how to remove the Telnet connection and the idle timeout from the security appliance configuration:
hostname(config)# clear configure telnetRelated Commands
clear configure terminal
To clear the terminal display width setting, use the clear configure terminal command in global configuration mode.
clear configure terminal
Syntax Description
This command has no keywords or arguments.
Defaults
The default display width is 80 columns.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Examples
The following example clears the display width:
hostname# clear configure terminalRelated Commands
terminal
Sets the terminal line parameters.
terminal width
Sets the terminal display width.
show running-config terminal
Displays the current terminal settings.
clear configure timeout
To restore the default idle time durations in the configuration, use the clear configure timeout command in global configuration mode.
clear configure timeout
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Examples
This example shows how to remove the maximum idle time durations from the configuration:
hostname(config)# clear configure timeoutRelated Commands
show running-config timeout
Displays the timeout value of the designated protocol.
timeout
Sets the maximum idle time duration.
clear configure tunnel-group
To remove all or specified tunnel groups from the configuration, use the clear config tunnel-group command in global configuration.
clear config tunnel-group [name]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example entered in global configuration mode, removes the toengineering tunnel group from the configuration:
hostname(config)# clear config tunnel-group toengineeringhostname(config)#Related Commands
show running-config tunnel-group
Displays information about all or selected tunnel-groups.
tunnel-group
Enters tunnel-group subconfiguration mode for the specified type.
clear configure url-block
To clear clears URL pending block buffer and long URL support configuration, use the clear configure url-block command in global configuration mode.
clear configure url-block
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
The clear configure url-block command clears URL pending block buffer and long URL support configuration.
Examples
The following example clears URL pending block buffer and long URL support configuration:
hostname# clear configure url-blockRelated Commands
clear configure url-cache
To clear the URL cache, use the clear configure url-cache command in global configuration mode.
clear configure url-cache
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
The clear configure url-cache command clears the URL cache.
Examples
The following example clears the URL cache:
hostname# clear configure url-cacheRelated Commands
clear configure url-list
To remove a configured set of URLs that WebVPN users can access , use the clear configure url-list command in global configuration mode. To remove all configured URLs, use this command without the listname argument. To remove only the URLs for a specific list, use this command with that listname.
clear configure url-list [listname]
Syntax Description
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example shows how to remove the URL list called Marketing URLs.
hostname(config)# clear configure url-list Marketing URLsRelated Commands
clear configure url-server
To clear the URL filtering server configuration, use the clear configure url-server command in global configuration mode.
clear configure url-server
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Usage Guidelines
The clear configure url-server command clears the URL filtering server configuration.
Examples
The following example URL filtering server configuration:
hostname# clear configure url-serverRelated Commands
clear configure username
To clear the username database, use the clear configure username command. To clear the configuration for a particular user, use this command and append the username.
clear configure username [name]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Usage Guidelines
The internal user authentication database consists of the users entered with the username command. The login command uses this database for authentication.
Examples
The following example shows how to clear the configuration for the user named anyuser:
hostname(config)# clear configure username anyuserRelated Commands
clear configure virtual
To remove the authentication virtual server from the configuration, use the clear configure virtual command in global configuration mode.
clear configure virtual
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
—
—
•
Command History
Usage Guidelines
There is no undo.
Examples
This example shows the clear configure virtual command:
hostname(config)# clear configure virtualRelated Commands
clear configure vpn-load-balancing
To remove the previously specified VPN load-balancing configuration, thus disabling VPN load-balancing, use the clear configure vpn load-balancing command in global configuration mode.
clear configure vpn load-balancing
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Usage Guidelines
The clear configure vpn load-balancing command also clears the following related commands: cluster encryption, cluster ip address, cluster key, cluster port, nat, participate, and priority.
Examples
The following command removes vpn load-balancing configuration statements from the configuration:
hostname(config)# clear configure vpn load-balancingRelated Commands
show running-config vpn load-balancing
Displays the current VPN load-balancing configuration.
vpn load-balancing
Enters vpn load-balancing mode.
clear conn
To clear a specific connection or multiple connections, use the clear conn command in privileged EXEC mode. This command supports IPv4 and IPv6 addresses.
clear conn [all] [protocol {tcp | udp}] [address src_ip[-src_ip] [netmask mask]] [port src_port[-src_port]] [address dest_ip[-dest_ip] [netmask mask]] [port dest_port[-dest_port]]
Syntax Description
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Usage Guidelines
When the security appliance creates a pinhole to allow secondary connections, this is shown as an incomplete conn by the show conn command. To clear this incomplete conn use the clear conn command.
Examples
The following example shows all connections, and then clears the management connection between 10.10.10.108:4168 and 10.0.8.112:22:
hostname# show conn allTCP mgmt 10.10.10.108:4168 NP Identity Ifc 10.0.8.112:22, idle 0:00:00, bytes 3084, flags UOBhostname# clear conn address 10.10.10.108 port 4168 address 10.0.8.112 port 22Related Commands
s
clear console-output
To remove the currently captured console output, use the clear console-output command in privileged EXEC mode.
clear console-output
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
·
·
·
·
·
Command History
Examples
The following example shows how to remove the currently captured console output:
hostname# clear console-outputRelated Commands
clear counters
To clear the protocol stack counters, use the clear counters command in global configuration mode.
clear counters [all | context context-name | summary | top N ] [detail] [protocol protocol_name [:counter_name]] [ threshold N]
Syntax Description
Defaults
clear counters summary detail
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Examples
This example shows how to clear the protocol stack counters:
hostname(config)# clear countersRelated Commands
clear crashinfo
To delete the contents of the crash file in Flash memory, enter the clear crashinfo command in privileged EXEC mode.
clear crashinfo
Syntax Description
This command has no arguments or keywords.
Defaults
No default behaviors or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
—
•
Command History
Usage Guidelines
This command has no usage guidelines.
Examples
The following command shows how to delete the crash file:
hostname# clear crashinfoRelated Commands
clear crypto accelerator statistics
To clear the the global and accelerator-specific statistics from the crypto accelerator MIB, use the clear crypto accelerator statistics command in global configuration and privileged EXEC modes.
clear crypto accelerator statistics
Syntax Description
This command has no keywords or variables.
Defaults
No default behavior or values.
Command Modes
The following table shows the mode in which you can enter the command:
Global configuration
•
•
•
—
—
Privileged EXEC
•
•
•
—
—
Command History
Examples
The following example entered in global configuration mode, displays crypto accelerator statistics:
hostname(config)# clear crypto accelerator statisticshostname(config)#Related Commands
clear crypto ca crls
To remove the CRL cache of all CRLs associated with a specified trustpoint or to remove the CRL cache of all CRLs, use the clear crypto ca crls command in global configuration.
clear crypto ca crls [trustpointname]
Syntax Description
trustpointname
(Optional) The name of a trustpoint. If you do not specify a name, this command clears all CRLs cached on the system.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
Command History
Examples
The following example issued in global configuration mode, removes all of the CRL cache from all CRLs from the security appliance:
hostname(config)# clear crypto ca crlshostname(config)#Related Commands
crypto ca crl request
Downloads the CRL based on the CRL configuration of the trustpoint.
show crypto ca crls
Displays all cached CRLs or CRLs cached for a specified trustpoint.
clear [crypto] ipsec sa
To remove the IPSec SA counters, entries, crypto maps or peer connections, use the clear [crypto] ipsec sa command in global configuration mode. To clear all IPSec SAs, use this command without arguments.
clear [crypto] ipsec sa [counters | entry {hostname | IP address} {esp | ah} {SPI}| map {map name} | peer {hostname | IP address}]
Be careful when using this command.
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
—
•
—
—
Command History
Examples
The following example, issued in global configuration mode, removes all of the IPSec SAs from the security appliance:
hostname(config)# clear ipsec sahostname(config)#The next example, issued in global configuration mode, deletes SAs with a peer IP address of 10.86.1.1.
hostname(config)# clear ipsec peer 10.86.1.1hostname(config)#
Related Commands
clear crypto protocol statistics
To clear the protocol-specific statistics in the crypto accelerator MIB, use the clear crypto protocol statistics command in global configuration or privileged EXEC modes.
clear crypto protocol statistics protocol
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the mode in which you can enter the command:
Global configuration
•
•
•
—
—
Privileged EXEC
•
•
•
—
—
Command History
Examples
The following example entered in global configuration mode, clears all crypto accelerator statistics:
hostname(config)# clear crypto protocol statistics allhostname(config)#Related Commands
clear dhcpd
To clear the DHCP server bindings and statistics, use the clear dhcp command.
clear dhcpd {binding [IP_address] | statistics}
Syntax Description
binding
Clears all the client address bindings.
IP_address
Clears the binding for the specified IP address.
statistics
Clears statistical information counters.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
—
Command History
Usage Guidelines
If you include the optional IP address in the clear dhcpd binding command, only the binding for that IP address is cleared.
To clear all of the DHCP server commands, use the clear configure dhcpd command.
Examples
The following example shows how to clear the dhcpd statistics:
hostname(config)# clear dhcpd statisticsRelated Commands
clear configure dhcpd
Removes all DHCP server settings.
show dhcpd
Displays DHCP binding, statistic, or state information.
clear dhcprelay statistics
To clear the DHCP relay statistic counters, use the clear dhcprelay statistics command in privileged EXEC mode.
clear dhcprelay statistics
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
•
—
Command History
Usage Guidelines
The clear dhcprelay statistics command only clears the DHCP relay statistic counters. To clear the entire DHCP relay configuration, use the clear configure dhcprelay command.
Examples
The following example shows how to clear the DHCP relay statistics:
hostname# clear dhcprelay statisticshostname#Related Commands
clear dns-hosts cache
To clear the DNS cache, use the clear dns-hosts cache command in privileged EXEC mode. This command does not clear static entries you added with the name command.
clear dns-hosts cache
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Examples
The following example clears the DNS cache:
hostname# clear dns-hosts cacheRelated Commands
clear failover statistics
To clear the failover statistic counters, use the clear failover statistics command in privileged EXEC mode.
clear failover statistics
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Usage Guidelines
This command clears the statistics displayed with the show failover statistics command and the counters in the Stateful Failover Logical Update Statistics section of the show failover command output. To remove the failover configuration, use the clear configure failover command.
Examples
The following example shows how to clear the failover statistic counters:
hostname# clear failover statisticshostname#Related Commands
debug fover
Displays failover debug information.
show failover
Displays information about the failover configuration and operational statistics.
clear fragment
To clear the operational data of the IP fragment reassembly module, enter the clear fragment command in privileged EXEC mode. This command clears either the currently queued fragments that are waiting for reassembly (if the queue keyword is entered) or clears all IP fragment reassembly statistics (if the statistics keyword is entered). The statistics are the counters, which tell how many fragments chains were successfully reassembled, how many chains failed to be reassembled, and how many times the maximum size was crossed resulting in overflow of the buffer.
clear fragment {queue | statistics} [interface]
Syntax Description
interface
(Optional) Specifies the security appliance interface.
queue
Clears the IP fragment reassembly queue.
statistics
Clears the IP fragment reassembly statistics.
Defaults
If an interface is not specified, the command applies to all interfaces.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
7.0
The command was separated into two commands, clear fragment and clear configure fragment, to separate clearing of the configuration data from the operational data.
Examples
This example shows how to clear the operational data of the IP fragment reassembly module:
hostname# clear fragment queueRelated Commands
clear gc
To remove the garbage collection process statistics, use the clear gc command in privileged EXEC mode.
clear gc
Syntax Description
This command has no arguments or keywords.
Defaults
No default behaviors or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
—
•
Command History
Examples
The following example shows how to remove the garbage collection process statistics:
hostname# clear gcRelated Commands
clear igmp counters
To clear all IGMP counters, use the clear igmp counters command in privileged EXEC mode.
clear igmp counters [if_name]
Syntax Description
if_name
The interface name, as specified by the nameif command. Including an interface name with this command causes only the counters for the specified interface to be cleared.
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Examples
The following example clears the IGMP statistical counters:
hostname# clear igmp countersRelated Commands
clear igmp group
Clears discovered groups from the IGMP group cache.
clear igmp traffic
Clears the IGMP traffic counters.
clear igmp group
To clear discovered groups from the IGMP group cache, use the clear igmp command in privileged EXEC mode.
clear igmp group [group | interface name]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
If you do not specify a group or an interface, all groups are cleared from all interfaces. If you specify a group, only the entries for that group are cleared. If you specify an interface, then all groups on that interface are cleared. If you specify both a group and an interface, only the specified groups on the specified interface are cleared.
This command does not clear statically configured groups.
Examples
The following example shows how to clear all discovered IGMP groups from the IGMP group cache:
hostname# clear igmpRelated Commands
clear igmp counters
Clears all IGMP counters.
clear igmp traffic
Clears the IGMP traffic counters.
clear igmp traffic
To clear the IGMP traffic counters, use the clear igmp traffic command in privileged EXEC mode.
clear igmp traffic
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Examples
The following example clears the IGMP statistical traffic counters:
hostname# clear igmp trafficRelated Commands
clear igmp group
Clears discovered groups from the IGMP group cache.
clear igmp counters
Clears all IGMP counters.
clear interface
To clear interface statistics, use the clear interface command in privileged EXEC mode.
clear interface [physical_interface[.subinterface] | mapped_name | interface_name]
Syntax Description
Defaults
By default, this command clears all interface statistics.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Usage Guidelines
If an interface is shared among contexts, and you enter this command within a context, the security appliance clears only statistics for the current context. If you enter this command in the system execution space, the security appliance clears the combined statistics.
You cannot use the interface name in the system execution space, because the nameif command is only available within a context. Similarly, if you mapped the interface ID to a mapped name using the allocate-interface command, you can only use the mapped name in a context.
Examples
The following example clears all interface statistics:
hostname# clear interfaceRelated Commands
clear ip audit count
To clear the count of signature matches for an audit policy, use the clear ip audit count command in privileged EXEC mode.
clear ip audit count [global | interface interface_name]
Syntax Description
global
(Default) Clears the number of matches for all interfaces.
interface interface_name
(Optional) Clears the number of matches for the specified interface.
Defaults
If you do not specify a keyword, this command clears the matches for all interfaces (global).
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Examples
The following example clears the count for all interfaces:
hostname# clear ip audit countRelated Commands
clear ip verify statistics
To clear the Unicast RPF statistics, use the clear ip verify statistics command in privileged EXEC mode. See the ip verify reverse-path command to enable Unicast RPF.
clear ip verify statistics [interface interface_name]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
•
—
Command History
Examples
The following example clears the Unicast RPF statistics:
hostname# clear ip verify statisticsRelated Commands
clear ipsec sa
To clear IPSec SAs entirely or based on specified parameters, use the clear ipsec sa command in global configuration and privileged EXEC modes. You can also use an alternate form: clear crypto ipsec sa.
clear ipsec sa [counters | entry peer-addr protocol spi | peer peer-addr | map map-name]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
—
—
Privileged EXEC
•
•
•
—
—
Command History
Examples
The following example, entered in global configuration mode, clears all IPSec SA counters:
hostname(config)# clear ipsec sa countershostname(config)#Related Commands
show ipsec sa
Displays IPSec SAs based on specified parameters.
show ipsec stats
Displays global IPSec statistics from the IPSec flow MIB.
clear ipv6 access-list counters
To clear the IPv6 access list statistical counters, use the clear ipv6 access-list counters command in privileged EXEC mode.
clear ipv6 access-list id counters
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
•
—
Command History
Examples
The following example shows how to clear the statistical data for the IPv6 access list 2:
hostname# clear ipv6 access-list 2 countershostname#Related Commands
clear ipv6 neighbors
To clear the IPv6 neighbor discovery cache, use the clear ipv6 neighbors command in privileged EXEC mode.
clear ipv6 neighbors
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
•
—
Command History
Usage Guidelines
This command deletes all discovered IPv6 neighbor from the cache; it does not remove static entries.
Examples
The following example deletes all entries, except static entries, in the IPv6 neighbor discovery cache:
hostname# clear ipv6 neighborshostname#Related Commands
ipv6 neighbor
Configures a static entry in the IPv6 discovery cache.
show ipv6 neighbor
Displays IPv6 neighbor cache information.
clear ipv6 traffic
To reset the IPv6 traffic counters, use the clear ipv6 traffic command in privileged EXEC mode.
clear ipv6 traffic
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
