Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Command Reference, 3.1
clear configure through clear configure virtual

Table Of Contents

clear configure through clear configure virtual Commands

clear configure

clear configure aaa

clear configure aaa-server

clear configure access-group

clear configure access-list

clear configure alias

clear configure arp

clear configure arp-inspection

clear configure asdm

clear configure auth-prompt

clear configure auto-update

clear configure banner

clear configure ca certificate map

clear configure class

clear configure class-map

clear configure command-alias

clear configure console

clear configure context

clear configure crypto

clear configure crypto ca trustpoint

clear configure crypto dynamic-map

clear configure crypto map

clear configure dhcpd

clear configure dhcprelay

clear configure dns

clear configure established

clear configure failover

clear configure filter

clear configure firewall

clear configure fixup

clear configure fragment

clear configure ftp

clear configure ftp-map

clear configure global

clear configure group-policy

clear configure gtp-map

clear configure hostname

clear configure http

clear configure http-map

clear configure icmp

clear configure interface

clear configure interface bvi

clear configure ip

clear configure ip local pool

clear configure ip verify reverse-path

clear configure ipv6

clear configure isakmp

clear configure isakmp policy

clear configure logging

clear configure logging rate-limit

clear configure mac-address-table

clear configure mac-learn

clear configure mac-list

clear configure management-access

clear configure mgcp-map

clear configure monitor-interface

clear configure mroute

clear configure mtu

clear configure multicast-routing

clear configure name

clear configure nat

clear configure object-group

clear configure passwd

clear configure pim

clear configure policy-map

clear configure prefix-list

clear configure privilege

clear configure rip

clear configure route

clear configure route-map

clear configure router

clear configure service-policy

clear configure snmp-map

clear configure snmp-server

clear configure ssh

clear configure static

clear configure sunrpc-server

clear configure sysopt

clear configure telnet

clear configure terminal

clear configure time-range

clear configure timeout

clear configure tunnel-group

clear configure url-block

clear configure url-cache

clear configure url-server

clear configure username

clear configure virtual


clear configure through clear configure virtual Commands


clear configure

To clear the running configuration, use the clear configure command in global configuration mode.

clear configure {primary | secondary | all | command}

Syntax Description

command

Clears the configuration for a specified command. For more information, see individual entries in this guide for each clear configure command command.

primary

Clears commands related to connectivity, including the following commands:

tftp-server

shun

route

ip address

mtu

failover

monitor-interface

boot

secondary

Clears commands not related to connectivity (that are cleared using the primary keyword).

all

Clears the entire running configuration.


Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System

Global configuration


Command History

Release
Modification

1.1(1)

This command was introduced.

3.1(1)

This command was modified to allow you to clear the configuration for each commmand.


Usage Guidelines

When you enter this command in a security context, you clear only the context configuration. If you enter this command in the system execution space, you clear the system running configuration as well as all context running configurations. Because you cleared all context entries in the system configuration (see the context command), the contexts are no longer running, and you cannot change to a context execution space.

Before clearing the configuration, make sure you save any changes to the boot config command (which specifies the startup configuration location) to the startup configuration; if you changed the startup configuration location only in the running configuration, then when you restart, the configuration loads from the default location.

Examples

The following example clears the entire running configuration:

hostname(config)# clear configure all

Related Commands

Command
Description

configure http

Merges a configuration file from the specified HTTP(S) URL with the running configuration.

configure memory

Merges the startup configuration with the running configuration.

configure net

Merges a configuration file from the specified TFTP URL with the running configuration.

show running-config

Shows the running configuration.


clear configure aaa

To clear the AAA configuration, use the clear configure aaa command in global configuration mode. The clear configure aaa command removes the AAA command statements from the configuration.

clear configure aaa

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System

Global configuration


Command History

Release
Modification

1.1(1)

The clear aaa command was introduced.

3.1(1)

This command was changed from clear aaa.


Usage Guidelines

This command also resets the AAA parameters to their default values, if any.

Examples

hostname(config)# clear configure aaa

Related Commands

Command
Description

aaa accounting

Enables or disables accounting.

aaa authentication

Enables or disables user authentication.

aaa authorization

Enables or disables user authorization.

show running-config aaa

Displays the AAA configuration.


clear configure aaa-server

To remove all AAA server groups or to clear the specified group, use the clear configure aaa-server command in global configuration mode.

clear configure aaa-server [server-tag]

clear configure aaa-server [server-tag] host server-ip

Syntax Description

server-ip

The IP address of the AAA server.

server-tag

(Optional) Symbolic name of the server group to be cleared.


Defaults

Remove all AAA server groups.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System

Global configuration


Command History

Release
Modification

1.1(1)

The clear aaa-server command was introduced.

3.1(1)

This command was changed from clear aaa-server.


Usage Guidelines

You can specify a particular AAA server group or, by default, all AAA server groups.

Use the host keyword to specify a particular server within a server group.

This command also resets the AAA server parameters to their default values, if any.

Examples

Given the following configuration:

hostname(config)# aaa-server svrgrp1 protocol sdi
hostname(config)# aaa-server svrgrp1 host 1.2.3.4
hostname(config-aaa-server)# timeout 9
hostname(config-aaa-server)# retry 7
hostname(config-aaa-server)# sdi-version sdi-5
hostname(config-aaa-server)# exit

several commands and examples follow.

The following command shows how to remove a specific server from a group:

hostname(config)# clear config aaa-server svrgrp1 host 1.2.3.4

The following command shows how to remove a server group:

hostname(config)# clear config aaa-server svrgrp1

The following command shows how to remove all server groups:

hostname(config)# clear config aaa-server

Related Commands

Command
Description

aaa-server host

Specifies and manages host-specific AAA server connection data.

aaa-server protocol

Lets you configure AAA server parameters that are group-specific and common to all hosts.

show running-config aaa

Displays the current maximum number of concurrent proxy connections allowed per user, along with other AAA configuration values.


clear configure access-group

To remove access groups from all the interfaces, use the clear configure access-group command.

clear configure access-group

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System

Global configuration


Command History

Release
Modification

1.1(1)

This command was introduced.

3.1(1)

This command was changed from clear access-group.


Examples

The following example shows how to remove all access groups:

hostname(config)# clear configure access-group

Related Commands

Command
Description

access-group

Binds an access list to an interface.

show running-config access-group

Displays the current access group configuration.


clear configure access-list

To clear an access list from the running configuration, use the clear configure access list command in global configuration mode.

clear configure access-list [id]

Syntax Description

id

(Optional) Name or number of an access list.


Defaults

All the access lists are cleared from the running configuration.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System

Global configuration


Command History

Release
Modification

3.1(1)

This command was introduced.


Examples

This example shows how to clear the access lists from the running configuration:

hostname(config)# clear configure access-list

Related Commands

Command
Description

access-list extended

Adds an access list to the configuration and configures policy for IP traffic through the firewall.

access-list standard

Adds an access list to identify the destination IP addresses of OSPF routes, which can be used in a route map for OSPF redistribution.

clear access-list

Clears access list counters.

show access-list

Displays counters for an access list.

show running-config access-list

Displays the access list configuration running on the FWSM.


clear configure alias

To remove all alias commands from the configuration, use the clear configure alias command in global configuration mode.

clear configure alias

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System

Global configuration


Command History

Release
Modification

1.1(1)

This command was introduced.

3.1(1)

This command was changed from clear alias.


Examples

This example shows how to remove all alias commands from the configuration:

hostname(config)# clear configure alias

Related Commands

Command
Description

alias

Translates one address into another.

show running-config alias

Displays the overlapping addresses with dual NAT commands in the configuration.


clear configure arp

To clear static ARP entries added by the arp command, use the clear configure arp command in global configuration mode.

clear configure arp

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System

Global configuration


Command History

Release
Modification

2.2(1)

This command was introduced.

3.1(1)

The configure keyword was added.


Examples

The following example clears static ARP entries from the configuration:

hostname# clear configure arp

Related Commands

Command
Description

arp

Adds a static ARP entry.

arp-inspection

For transparent firewall mode, inspects ARP packets to prevent ARP spoofing.

firewall transparent

Sets the firewall mode to transparent.

show arp statistics

Shows ARP statistics.

show running-config arp

Shows the current configuration of the ARP timeout.


clear configure arp-inspection

To clear the ARP inspection configuration, use the clear configure arp-inspection command in global configuration mode.

clear configure arp-inspection

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System

Global configuration


Command History

Release
Modification

2.2(1)

This command was introduced.

3.1(1)

This command was changed from clear arp-inspection.


Examples

The following example clears the ARP inspection configuration:

hostname# clear configure arp-inspection

Related Commands

Command
Description

arp

Adds a static ARP entry.

arp-inspection

For transparent firewall mode, inspects ARP packets to prevent ARP spoofing.

firewall transparent

Sets the firewall mode to transparent.

show arp statistics

Shows ARP statistics.

show running-config arp

Shows the current configuration of the ARP timeout.


clear configure asdm

To remove all asdm commands from the running configuration, use the clear configure asdm command in global configuration mode.

clear configure asdm [location | group]

Syntax Description

group

(Optional) Clears only the asdm group commands from the running configuration.

location

(Optional) Clears only the asdm location commands from the running configuration.


Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System

Global configuration


Command History

Release
Modification

1.1(1)

This command was introduced (as the clear pdm command).

3.1(1)

This command was changed from the clear pdm command to the clear configure asdm command.


Usage Guidelines

To view the asdm commands in the running configuration, use the show running-config asdm command.

Clearing the asdm location and asdm group commands from the configuration causes ASDM to regenerate those commands the next time ASDM is accessed, but may disrupt active ASDM sessions.


Note On FWSMs running in multiple context mode, the clear configure asdm group and clear configure asdm location commands are only available in the user contexts.


Examples

The following example clears the asdm group commands from the running configuration:

hostname(config)# clear configure asdm group
hostname(config)#

Related Commands

Command
Description

asdm group

Used by ASDM to associate object group names with interfaces.

asdm location

Used by ASDM to record IP address to interface associations.

show running-config asdm

Displays the asdm commands in the running configuration.


clear configure auth-prompt

To remove the previously specified authentication prompt challenge text and revert to the default value, if any, use the clear configure auth-prompt command in global configuration mode.

clear configure auth-prompt

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System

Global configuration


Command History

Release
Modification

1.1(1)

The clear auth-prompt command was introduced.

3.1(1)

This command was changed from clear auth-prompt.


Usage Guidelines

After you clear the authentication prompt, the prompt users see when they log in depends on the protocol they use:

Users who log in using HTTP see the following prompt: HTTP Authentication.

Users who log in using FTP see the following prompt: FTP Authentication.

Users who log in using Telnet see no prompt.

Examples

The following example shows how to clear the auth-prompt:

hostname(config)# clear configure auth-prompt

Related Commands

auth-prompt

Sets the user authorization prompts.

show running-config auth-prompt

Displays the user authorization prompts.


clear configure auto-update

To clear the Auto Update Server configuration, use the clear configure auto-update command in global configuration mode.

clear configure auto-update

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System

Global configuration


Command History

Release
Modification

3.1(1)

This command was introduced.


Examples

The following example clears the ARP inspection configuration:

hostname# clear configure auto-update

Related Commands

Command
Description

auto-update device-id

Sets the FWSM device ID for use with an Auto Update Server.

auto-update poll-period

Sets how often the FWSM checks for updates from an Auto Update Server.

auto-update server

Identifies the Auto Update Server.

auto-update timeout

Stops traffic from passing through the FWSM if the Auto Update Server is not contacted within the timeout period.

show running-config auto-update

Shows the Auto Update Server configuration.


clear configure banner

To remove all the banners, use the clear configure banner command in global configuration mode.

clear configure banner

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System

Global configuration


Command History

Release
Modification

2.2(1)

The clear banner command was introduced.

3.1(1)

This command was changed to clear configure banner.


Examples

The following example shows how to clear banners:

hostname(config)# clear configure banner

Related Commands

Command
Description

banner

Configures the session, login, or message-of-the-day banner.

show running-config banner

Displays all banners.


clear configure ca certificate map

To remove all certificate map entries or to remove a specified certificate map entry, use the clear configure ca configurate map command in global configuration mode.

clear configure ca certificate map [sequence-number]

Syntax Description

sequence-number

(Optional) Specifies a number for the certificate map rule you are removing. The range is 1 through 65535.


Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System

Global configuration


Command History

Release
Modification

3.1(1)

This command was introduced.


Examples

The following example removes all certificate map entries.

hostname(config)# clear configure ca certificate map
hostname(config)#

Related Commands

Command
Description

crypto ca certificate map

Enters CA certificate map mode.


clear configure class

To clear the class configuration, use the clear configure class command in global configuration mode.

clear configure class

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System

Global configuration

N/A

N/A


Command History

Release
Modification

2.2(1)

This command was introduced.

3.1(1)

This command was changed from clear class.


Examples

The following example clears the class configuration:

hostname(config)# clear configure class

Related Commands

Command
Description

class

Configures a resource class.

context

Configures a security context.

limit-resource

Sets the resource limit for a class.

member

Assigns a context to a resource class.

show class

Shows the contexts assigned to a class.


clear configure class-map

To remove all class maps, use the clear configure class-map command in global configuration mode.

clear configure class-map

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System

Global configuration


Command History

Release
Modification

3.1(1)

This command was introduced.


Usage Guidelines

To clear the class map for a specific class map name, use the no form of the class-map command.

Examples

The following example shows how to clear all configured class-maps:

hostname(config)# clear configure class-map

Related Commands

Command
Description

class-map

Applies a traffic class to an interface.

show running-config class-map

Displays the information about the class map configuration.


clear configure command-alias

To remove all non-default command aliases, use the clear configure command-alias command in global configuration mode.

clear configure command-alias

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System

Global configuration


Command History

Release
Modification

3.1(1)

This command was introduced.


Examples

The following example shows how to remove all non-default command aliases:

hostname(config)# clear configure command-alias

Related Commands

Command
Description

command-alias

Creat