Table Of Contents

clear mls multicast statistics

clear mls nde

clear mls nde flow

clear mls statistics

clear mls statistics entry

clear module password

clear msfcautostate

clear multicast router

clear mvrp configuration

clear mvrp counters

clear mvrp statistics

clear ntp server

clear ntp timezone

clear packet-capture

clear pbf

clear pbf arp-inspection

clear pbf client

clear pbf gw

clear pbf-map

clear pbf vlan

clear policy

clear port broadcast

clear port cops

clear port eou

clear port ethernet-cfm

clear port ethernet-evc

clear port ethernet-lmi

clear port ethernet-oam

clear port ethernet-uni

clear port flexlink

clear port host

clear port qos autoqos

clear port qos cos

clear port security

clear port vlan-mapping

clear port web-auth

clear pvlan mapping

clear qos acl

clear qos autoqos

clear qos config

clear qos cos-cos-map

clear qos cos-dscp-map

clear qos dscp-cos-map

clear qos dscp-mutation-map

clear qos dscp-mutation-table-map

clear qos ipprec-dscp-map

clear qos mac-cos

clear qos map

clear qos policed-dscp-map

clear qos policer

clear qos statistics

clear radius

clear rcp

clear rgmp statistics

clear security acl

clear security acl capture-ports

clear security acl counters

clear security acl cram

clear security acl log flow

clear security acl map

clear security acl statistics

clear snmp access

clear snmp access-list

clear snmp community

clear snmp community-ext

clear snmp group

clear snmp ifalias

clear snmp inform

clear snmp notify

clear snmp targetaddr

clear snmp targetparams

clear snmp trap

clear snmp user

clear snmp view

clear spantree detected-protocols

clear spantree mst

clear spantree portcost

clear spantree portinstancecost

clear spantree portinstancepri

clear spantree portpri

clear spantree portvlancost

clear spantree portvlanpri

clear spantree root

clear spantree statistics

clear spantree uplinkfast

clear ssh mode

clear system info-log command

clear system profile

clear tacacs key

clear tacacs server

clear timezone

clear top

clear trunk

clear vlan

clear vlan counters

clear vlan mapping

clear vmps rcp

clear vmps server

clear vmps statistics

clear vtp pruneeligible

clear vtp statistics

clear mls multicast statistics

To remove MLS multicast statistics maintained by the MSFC on the switch, use the clear mls multicast statistics command.

clear mls multicast statistics [mod]

Syntax Description

mod	(Optional) Number of the MSFC; valid values are 15 and 16.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you enter the clear mls multicast statistics command on a Catalyst 6500 series switch without MLS, this warning message is displayed:

MLS Multicast is not supported on feature card.

If you place the MFSC on a supervisor engine installed in slot 1, the MFSC is recognized as module 15. If you install the supervisor engine in slot 2, the MFSC is recognized as module 16.

The mod option is not supported on switches configured with the Supervisor Engine 2 with Layer 3 Switching Engine II (PFC2).

Examples

This example shows how to clear MLS statistics on a switch configured with the Supervisor Engine 1 with Layer 3 Switching Engine WS-F6K-PFC (Policy Feature Card):

Console> (enable) clear mls multicast statistics

All statistics for the MLS routers in include list are cleared.

Console> (enable)

This example shows how to clear MLS statistics on a switch configured with the Supervisor Engine 2 with Layer 3 Switching Engine II (PFC2):

Console> (enable) clear mls multicast statistics

All statistics cleared.

Console> (enable)

Related Commands

set port vlan-mapping
show mls statistics

clear mls nde

To clear primary and secondary NDE collector destinations and to disable NDE, use the clear mls nde command.

clear mls nde [IP_address port]

Syntax Description

IP_address	(Optional) IP address of a specific NDE collector destination.
port	(Optional) Port of a specific NDE collector destination.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Entering the clear mls nde command without an IP address and port number clears both primary and secondary NDE collector destinations and disables NDE. To clear a specific NDE collector destination, you must specify an IP address and port for the destination. If the IP address does not specify a valid NDE collector destination, the command is rejected.

Examples

This example shows how to clear both the primary and secondary collectors:

Console> (enable) clear mls nde

Collector's IP address cleared.

Secondary Collector IP address cleared.

Console> (enable)

This example shows how to clear a specific collector destination:

Console> (enable) clear mls nde 10.6.1.10 9939

Cleared Collector IP 10.6.1.10 port 9939

Console> (enable)

This example shows the message that displays when the IP address does not specify a valid NDE collector destination:

Console> (enable) clear mls nde 10.6.1.10 1111

Specified address not a valid collector

Console> (enable)

Related Commands

set mls nde
show mls nde

clear mls nde flow

To reset the NDE filters in the Catalyst 6500 series switches, use the clear mls nde flow command.

clear mls nde flow

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Clearing both exclusion and inclusion filters results in exporting of all flows.

Examples

This example shows how to clear the NDE exclusion and inclusion filters and export all flows:

Console> (enable) clear mls nde flow

Netflow data export filter cleared.

Console> (enable)

Related Commands

set mls nde
show mls exclude protocol

clear mls statistics

To clear hardware-installed MLS statistics entries, use the clear mls statistics command.

clear mls statistics

clear mls statistics protocol {protocol port} | all

Syntax Description

statistics	Clears total packets switched and total packets exported (for NDE).
statistics protocol	Clears protocols for statistics collection.
protocol	Number of the protocol in the protocol statistics list.
port	Number of the port.
all	Clears all entries from the statistics protocol list.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

To use a router as an MLS, you must meet these conditions:

•The router must be included (either explicitly or automatically) in the MLS-SE.

•The MLS feature must be enabled in the Catalyst 6500 series switches.

•Catalyst 6500 series switches must know the MAC-VLAN pairs on the router.

If you enter any of the clear mls statistics commands on a Catalyst 6500 series switch without MLS, this warning message displays:

Feature not supported in hardware.

When you remove an MSM from the Catalyst 6500 series switch, it is removed immediately from the inclusion list and all the MLS entries for the MSM are removed.

Examples

This example shows how to clear IP MLS statistics, including total packets switched and total packets exported (for NDE):

Console> (enable) clear mls statistics 

Netflow data export statistics cleared.

Console> (enable)

This example shows how to clear protocol 17, port 19344 from the statistics collection:

Console> (enable) clear mls statistics protocol 17 19344

Protocol 17 port 1934 cleared from protocol statistics list.

Console> (enable)

Related Commands

set mls statistics protocol
show mls statistics

clear mls statistics entry

To clear statistics for MLS entries, use the clear mls statistics entry command.

clear mls statistics entry [ip | ipx] all

clear mls statistics entry ip [destination ip_addr_spec] [source ip_addr_spec]
[protocol protocol] [src-port src_port] [dst-port dst_port]

clear mls statistics entry ipx destination ipx_addr_spec

Syntax Description

ip	(Optional) Specifies IP MLS.
ipx	(Optional) Specifies IPX MLS.
all	Purges all matching MLS entries.
destination	(Optional) Specifies the destination IP address.
ip_addr_spec	(Optional) Full IP address or a subnet address in these formats: ip_addr, ip_addr/netmask, or ip_addr/maskbit.
source	(Optional) Specifies the source IP address.
protocol protocol	(Optional) Specifies additional flow information (protocol family and protocol port pair) to be matched; valid values are from 0 to 255 or ip, ipinip, icmp, igmp, tcp, and udp.
src-port src_port	(Optional) Specifies the source port IP address; valid values are from 1 to 65535, dns, ftp, smtp, telnet, x (X-Windows), www.
dst-port dst_port	(Optional) Specifies the destination port IP address; valid values are from 1 to 65535, dns, ftp, smtp, telnet, x (X-Windows), www.
ipx_addr_spec	Full IPX address or a subnet address in these formats: src_net/[mask], dest_net.dest_node, or dest_net/mask.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you specify the ip keyword or do not enter a keyword, the command supports IP MLS. If you specify the ipx keyword, the command supports IPX only.

When you remove an MSM from the Catalyst 6500 series switch, it is removed immediately from the inclusion list and all the MLS entries for the MSM are removed.

When entering the IPX address syntax, use the following format:

•IPX net address—1..FFFFFFFE

•IPX node address—x.x.x where x is 0..FFFF

•IPX address—ipx_net.ipx_node (for example 3.0034.1245.AB45, A43.0000.0000.0001)

Up to 16 routers can be included explicitly as MLS-RPs.

To use a router as an MLS, you must meet these conditions:

•The router must be included (either explicitly or automatically) in the MLS-SE.

•The MLS feature must be enabled in the Catalyst 6500 series switches.

•Catalyst 6500 series switches must know the router's MAC-VLAN pairs.

Use the following syntax to specify an IP subnet address:

•ip_subnet_addr—This is the short subnet address format. The trailing decimal number 00 in an IP address YY.YY.YY.00 specifies the boundary for an IP subnet address. For example, 172.22.36.00 indicates a 24-bit subnet address (subnet mask 172.22.36.00/255.255.255.0), and 173.24.00.00 indicates a 16-bit subnet address (subnet mask 173.24.00.00/255.255.0.0). However, this format can identify only a subnet address of 8, 16, or 24 bits.

•ip_addr/subnet_mask—This is the long subnet address format. For example, 172.22.252.00/255.255.252.00 indicates a 22-bit subnet address. This format can specify a subnet address of any bit number. To provide more flexibility, the ip_addr is a full host address, such as 172.22.253.1/255.255.252.00.

•ip_addr/maskbits—This is the simplified long subnet address format. The mask bits specify the number of bits of the network masks. For example, 172.22.252.00/22 indicates a 22-bit subnet address. The ip_addr is a full host address, such as 193.22.253.1/22, which has the same subnet address as the ip_subnet_addr.

A 0 value for src_port and dest_port clears all entries. Unspecified options are treated as wildcards, and all entries are cleared.

If you enter any of the clear mls commands on a Catalyst 6500 series switch without MLS, this message is displayed:

Feature not supported in hardware.

Examples

This example shows how to clear all specific MLS entries:

Console> (enable) clear mls statistics entry ip all

Multilayer switching entry cleared

Console> (enable)

This example shows how to clear specific IPX MLS entries for a destination IPX address:

Console> (enable) clear mls statistics entry ipx destination 1.0002.00e0.fefc.6000

MLS IPX entry cleared.

Console> (enable)

Related Commands

show mls

clear module password

To clear the password set by the password username NAM command, use the clear module password command.

clear module password mod

Syntax Description

mod	Number of the NAM.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is supported by the NAM only.

The password username command is a NAM command and not a supervisor engine console command.

A message is displayed when the password is successfully cleared. See the "Examples" section for an example of the message.

Examples

This example shows how to clear the password from the NAM:

Console> (enable) clear module password 6

Module 6 password cleared.

Console> (enable) 2000 Apr 07 11:03:06 %SYS-5-MOD_PASSWDCLR:Module 6 password cl

eared from telnet/10.6.1.10/tester

Console> (enable) 

Related Commands

password (Refer to the NAM Installation and Configuration Note.)

clear msfcautostate

To clear the MSFC autostate configuration, use the clear msfcautostate command.

clear msfcautostate {all | mod/ports}

Syntax Description

all	Clears the MSFC autostate configuration on all ports.
mod/ports	Module numbers and port numbers for which the MSFC autostate configuration is cleared.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear all MSFC autostate configurations:

Console> (enable) clear msfcautostate all

Console> (enable)

This example shows how to clear the MSFC autostate configuration on a specific port:

Console> (enable) clear msfcautostate 3/1

MSFC autostate config cleared on excluded port 3/1

Console> (enable)

Related Commands

set msfcautostate
show msmautostate

clear multicast router

To clear manually configured multicast router ports from the multicast router port list, use the clear multicast router command.

clear multicast router {mod/port | all}

Syntax Description

mod/port	Number of the module and the port on the module.
all	Specifies all multicast router ports to be cleared.

Defaults

The default configuration has no multicast router ports configured.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear multicast router port 1 on module 3:

Console> (enable) clear multicast router 3/1 
Port 3/1 cleared from multicast router port list.

Console> (enable)

Related Commands

set multicast router
show multicast router

clear mvrp configuration

To clear MVRP configuration, use the clear mvrp configuration command.

clear mvrp configuration

Syntax Description

This command has no arguments or keywords.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear MVRP configuration:

console(enable) clear mvrp configuration 

Usage: clear mvrp configuration <all|mod/port>

console(enable) clear mvrp configuration all

Warning:MVRP configuration will be cleared.

Do you want to continue (y/n) [y]?y

MVRP configuration cleared for all ports.

console(enable) 

clear mvrp counters

To clear MVRP counters, use the clear mvrp counters command.

clear mvrp counters

Syntax Description

This command has no arguments or keywords.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear MVRP counters:

console(enable) clear mvrp counters

Warning:MVRP counters will be cleared.

Do you want to continue (y/n) [y]?y

MVRP counters cleared successfully.

Console> (enable)

clear mvrp statistics

To clear statistics entered on one (or all) MVRP enabled port(s), use the clear mvrp statistics command.

clear mvrp statistics {all | mod/port}

Syntax Description

all	Specifies all MVRP enabled ports.
mod/port	Number of the module and the port on the module.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear MVRP statistics:

Console> (enable) clear mvrp statistics 

Usage: clear mvrp statistics <all|mod/port>

console(enable) clear mvrp statistics all

Warning:MVRP statistics will be cleared.

Do you want to continue (y/n) [y]?y

Failed to clear MVRP statistics. Trunk is not MVRP enabled.

console(enable) 

clear ntp server

To remove one or more servers from the NTP server table, use the clear ntp server command.

clear ntp server {ip_addr | all}

Syntax Description

ip_addr	IP address of the server to remove from the server table.
all	Specifies all server addresses in the server table to be removed.

Defaults

The default configuration has no NTP servers configured.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to remove a specific NTP server from the server table:

Console> (enable) clear ntp server 172.20.22.191

NTP server 172.20.22.191 removed.

Console> (enable)

This example shows how to remove all NTP servers from the server table:

Console> (enable) clear ntp server all

All NTP servers cleared.

Console> (enable)

Related Commands

show ntp

clear ntp timezone

To return the time zone to its default, UTC, use the clear ntp timezone command.

clear ntp timezone

Syntax Description

This command has no arguments or keywords.

Defaults

The default time zone is UTC.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The clear ntp timezone command functions only when NTP is running. If you set the time manually and NTP is disengaged, the clear ntp timezone command has no effect.

Examples

This example shows how to clear the time zone:

Console> (enable) clear ntp timezone

This command will clear NTP timezone and summertime zonename

Do you want to continue (y/n) [n]? y

Timezone name and offset cleared

Console> (enable) 

Related Commands

set ntp timezone
show ntp

clear packet-capture

To restore packet-capturing settings to their defaults for the Mini Protocol Analyzer feature, use the clear packet-capture command.

clear packet-capture {dump-file | filter | snap-length | limit | all}

Syntax Description

dump-file	Clears the packet-capture filename setting.
filter	Clears the packet-capture filter setting.
snap-length	Clears the packet-capture length setting.
limit	Clears the packet-capture limit setting.
all	Clears all the packet-capturing settings.

Defaults

This commands has not default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command restores default settings for the Mini Protocol Analyzer feature. See the commands that are listed in the "Related Commands" section for default settings.

Examples

This example shows how to clear the the dump filename:

Console> (enable) clear packet-capture dump-file

Packet capture File name cleared.

Console> (enable)

This example shows how to clear the packet-capture filter setting:

Console> (enable) clear packet-capture filter

Packet-capture filter(s) cleared.

Console> (enable)

This example shows how to clear the snap length:

Console> (enable) clear packet-capture snap-length

Packet-capture snap length cleared. The complete packet will be captured.

Console> (enable)

This example shows how to clear the default setting for the limit:

Console> (enable) clear packet-capture limit

Packet-capture limit cleared. Packets will be captured until the

specified flash device is full.

Console> (enable)

This example sets the default setting for all the packet-capture settings:

Console> (enable) clear packet-capture all

Packet-capture settings cleared.

Console> (enable)

Related Commands

set packet-capture
set packet-capture dump-file
set packet-capture filter
set packet-capture limit
set packet-capture snap-length
show packet-capture

clear pbf

To remove the MAC address for the PFC2, use the clear pbf command.

clear pbf

Syntax Description

This command has no keywords or arguments.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Refer to the "Configuring Policy-Based Forwarding" section of Chapter 16, "Configuring Access Control," in the Catalyst 6500 Series Switch Software Configuration Guide for detailed information about PBF.

Examples

This example shows how to clear the MAC address for the PFC2:

Console> (enable) clear pbf

PBF cleared

Console> (enable)

Related Commands

set pbf
show pbf

clear pbf arp-inspection

To clear the ARP-inspection ACE from the ACL for a client list or a gateway, use the clear pbf arp-inspection command.

clear pbf arp-inspection list_name

Syntax Description

list_name

Client list or gateway list.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If the ARP-inspection ACE is removed from the PBF ACL, the supervisor engine will no longer answer the ARP requests.

Examples

This example shows how to clear the ARP-inspection ACE from the ACL of a client list:

Console> (enable) clear pbf arp-inspection cl1

.ccl1 editbuffer modified. Use 'commit' command to save changes.

Console> (enable) ACL commit in progress.

ACL '.ccl1' successfully committed.

Console> (enable)

Related Commands

set pbf arp-inspection
show pbf arp-inspection

clear pbf client

To clear a client or all clients from the list, use the clear pbf client command.

clear pbf client client_list [ip_addr]

Syntax Description

client_list	Client list name.
ip_addr	(Optional) IP address.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The clear pbf client command can be used only if there is no PBF map in place.

Examples

This example shows how to clear a client list:

Console> (enable) clear pbf client cl1

.c0001cl1 editbuffer modified. Use 'commit' command to apply changes.

Console> (enable) Commit operation successfull.

Console> (enable)

This example shows the message that displays if you try to clear a client list when there is a PBF map in place:

Console> (enable) clear pbf client cl1

Operation failed: clear pbf-map first.

Console> (enable)

Related Commands

clear pbf gw
clear pbf-map
set pbf client
set pbf gw
set pbf-map
show pbf client
show pbf gw
show pbf-map

clear pbf gw

To clear a gateway or all gateways, use the clear pbf gw command.

clear pbf gw [name] [adjacency_name | ip_addr | all]

Syntax Description

name	(Optional) Specifies the gateway name.
adjacency_name	(Optional) Adjacency name that you specify to clear the policy-based forwarding (PBF) client or gateway entry.
ip_addr	(Optional) IP address.
all	(Optional) All the adjacencies present in the specified gateway.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The clear pbf gw command can be used only if there is no PBF map in place.

Examples

This example shows how to display the status of the gateway LAB:

Console> (enable) show pbf gw 

Name      : LAB

Map       : No map

VLAN      : 1

Gateways  : 1

Adjacency          ip              mask            mac                

-----------------------------------------------------------------------------

cisbalt3           106.40.162.3    255.255.255.0   00-18-b9-47-e3-51       

This example shows how to clear the gateway LAB with the adjacency name cisbalt3:

Console> (enable) clear pbf gw LAB cisbalt3

cisbalt3 editbuffer modified. Use 'commit' command to apply changes.

Commit operation successful.

Operation successful.

This example shows how to display the status of the gateway g2:

Console> (enable) show pbf gw 

Name      : g2

Map       : No map

VLAN      : 11

Gateways  : 3

Adjacency          ip              mask            mac                

-----------------------------------------------------------------------------

adj-g2             10.10.10.1      255.255.255.0   00-0b-fc-7b-3b-fc       

adj-g3             10.10.10.2      255.255.255.0   00-0b-fc-7b-3b-fa       

adj-g4             10.10.10.3      255.255.255.0   00-0b-fc-7b-3b-fb       

This example shows how to clear the gateway g2 with IP address 10.10.10.2:

Console> (enable) clear pbf gw g2 10.10.10.2

adj-g3 editbuffer modified. Use 'commit' command to apply changes.

Commit operation successful.

Operation successful.

This example shows how to display the status of the gateway g2:

Console> (enable) show pbf gw 

Name      : g2

Map       : No map

VLAN      : 11

Gateways  : 2

Adjacency          ip              mask            mac                

-----------------------------------------------------------------------------

adj-g2             10.10.10.1      255.255.255.0   00-0b-fc-7b-3b-fc       

adj-g4             10.10.10.3      255.255.255.0   00-0b-fc-7b-3b-fb       

This example shows how to clear the gateway g2 and all adjacencies under it:

Console> (enable) clear pbf gw g2 all

adj-g2 editbuffer modified. Use 'commit' command to apply changes.

adj-g4 editbuffer modified. Use 'commit' command to apply changes.

Console> (enable) Commit operation successful.

Console> (enable) show pbf gw 

PBF list empty.

Related Commands

clear pbf client
clear pbf-map
set pbf client
set pbf gw
set pbf-map
show pbf client
show pbf gw
show pbf-map

clear pbf-map

To clear PBF map information, use the clear pbf-map command.

clear pbf-map {vlan vlan} | all | {ip_addr_1} {mac_addr_1} {vlan_1} {ip_addr_2} {mac_addr_2} {vlan_2}

clear pbf-map {client_list} {gw_name}

Syntax Description

vlan vlan	Clears the ACL with the name PBF_MAP_ACL_vlan and the adjacency table used by this ACL.
all	Clears all adjacency information and ACLs that were created by entering the set pbf-map command.
ip_addr_1	IP address of host 1.
mac_addr_1	MAC address of host 1.
vlan_1	Number of the first VLAN.
ip_addr_2	IP address of host 2.
mac_addr_2	MAC address of host 2.
vlan_2	Number of the second VLAN.
client_list	Client list name.
gw_name	Gateway list name.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

When you enter clear pbf-map {ip_addr_1} {mac_addr_1} {vlan_1} {ip_addr_2} {mac_addr_2} {vlan_2}, all ACEs that were created by entering the set pbf-map command are cleared, except permit ip any any. This command removes entries that enable traffic between hosts with ip_addr_1 and ip_addr_2 on the two specified VLANs.

Use the clear pbf-map command to delete the redirect-to-adjacency ACEs and adjacency information contained in the PBF_MAP_ACL_(VLAN_ID) ACL.

Use the clear security acl command to clear all other ACE types that are part of the PBF_MAP_ACL_vlan ACL.

If entries were already deleted by using the clear security acl command, a message appears that states that the specified entries were already cleared.

Examples

This example shows how to clear the ACL with the name PBF_MAP_ACL_11:

Console> (enable) clear pbf-map vlan 11

ACL 'PBF_MAP_ACL_11' successfully deleted.

Console> (enable) Commit operation successfull.

Console> (enable)

This example shows how to clear all adjacency information and ACLs that were created by entering the set pbf-map command:

Console> (enable) clear pbf-map all

ACL 'PBF_MAP_ACL_11' successfully deleted.

Console> (enable)

ACL 'PBF_MAP_ACL_22' successfully deleted.

Console> (enable)

This example shows how to clear all entries that enable traffic between the two specified hosts:

Console> (enable) clear pbf-map 1.1.1.1 0-0-0-0-0-1 11 2.2.2.2 0-0-0-0-0-2 22

ACL 'PBF_MAP_ACL_11' successfully committed.

Console> (enable)

ACL 'PBF_MAP_ACL_22' successfully committed.

Console> (enable)

This example shows how to clear the PBF mapping:

Console> (enable) clear pbf-map cl1 gw1

.ccl1 editbuffer modified. Use 'commit' command to save changes.

.ggw1 editbuffer modified. Use 'commit' command to save changes.

Console> (enable) ACL commit in progress.

Console> (enable) ACL commit in progress.

ACL '.ccl1' successfully deleted.

Console> (enable) 

ACL '.ggw1' successfully deleted.

Console> (enable)

Related Commands

clear pbf client
clear pbf gw
clear security acl
set pbf client
set pbf gw
set pbf-map
show pbf client
show pbf gw
show pbf-map

clear pbf vlan

To clear PBF-enabled VLANs and remove them from NVRAM, use the clear pbf vlan command.

clear pbf vlan vlan

Syntax Description

vlan	VLAN number.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Using the clear pbf command does not clear the VLANs enabled for PBF. The clear pbf command does clear the Layer 2 table entries associated with the VLANs (because the MAC address is no longer valid). You must explicitly clear the PBF-enabled VLANs to remove them from NVRAM by entering the clear pbf vlan vlan command.

You can specify a range of VLANs in the CLI.

Examples

This example shows how to clear PBF on VLANs 11 and 12:

Console> (enable) clear pbf vlan 11-12

PBF disabled on vlan(s) 11-12

Console> (enable)

Related Commands

set pbf vlan
show pbf

clear policy

To clear an IP address from a policy group or to clear a policy group from a policy template, use the clear policy command.

clear policy group group_name ip-address ip_addr

clear policy name policy_name group group_name

clear policy name policy_name url-redirect

Syntax Description

group group_name	Clears policy group memberships.
ip-address ip_addr	Specifies IP address to be cleared from group membership.
name policy_name	Clears a policy group from a policy template.
url-redirect	Clears the URL redirect string that is associated with the policy name.

Command Default

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear an IP address from a policy group:

Console> (enable) clear policy group grp1 ip-address 100.1.1.1

Cleared IP 100.1.1.1 from policy group grp1.

Console> (enable)

This example shows how to clear a policy group from a policy template:

Console> (enable) clear policy name pol1 group grp1

Cleared group grp1 from policy template pol1.

Console> (enable)

This example shows how to clear the URL redirect string that is associated with a policy name:

Console> (enable) clear policy name exception_policy url-redirect

Unmapped Url-redirect http://cisco.com from policy name exception_policy

Console> (enable)

Related Commands

set policy
show policy

clear port broadcast

To disable broadcast/multicast suppression on one or more ports, use the clear port broadcast command.

clear port broadcast mod/port

Syntax Description

mod/port

Number of the module and the port on the module.

Defaults

The default configuration has broadcast/multicast suppression cleared (that is, unlimited broadcast/multicast traffic allowed).

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to disable broadcast/multicast suppression:

Console> (enable) clear port broadcast 2/1

Broadcast traffic unlimited on ports 2/1.

Console> (enable)

Related Commands

set port broadcast
show port broadcast

clear port cops

To clear port roles, use the clear port cops command.

clear port cops mod/port roles role1 [role2]...

clear port cops mod/port all-roles

Syntax Description

mod/port	Number of the module and the port on the module.
roles role#	Specifies the roles to clear.
all-roles	Clears all roles.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The clear port cops command detaches the roles from the port only; it does not remove them from the global table.

Examples

This example shows how to remove specific roles from a port:

Console> (enable) clear port cops 3/1 roles backbone_port main_port

Roles cleared for port(s) 3/1-4.

Console> (enable)

This example shows how to remove all roles from a port:

Console> (enable) clear port cops 3/1 all-roles

All roles cleared for port 3/1-4.

Console> (enable)

Related Commands

set port cops
show port cops

clear port eou

To clear the mapping of an AAA fail policy for EoU on a specified port, use the clear port eou command.

clear port eou mod[/port] aaa-fail-policy

Syntax Description

mod	Module number.
port	(Optional) Port on the module.
aaa-fail-policy	Clears the mapping of an AAA fail policy.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear an AAA fail policy on module 5, port 10:

Console> (enable) clear port eou 5/10 aaa-fail-policy

aaa-fail-policy cleared successfully on port 5/10

Console> (enable)

Related Commands

set port eou
show port eou

clear port ethernet-cfm

To clear the Maintenance End Points (MEP) or Maintenance Intermediate Points (MIP) for a specific port, use the clear port ethernet-cfm command.

clear port ethernet-cfm mod/port

clear port ethernet-cfm mod/port mep level level [vlan vlan]

clear port ethernet-cfm mod/port mip level level [vlan vlan]

Syntax Description

mod/port	Number of the module and the port on the module.
mep	Clears the MEP configuration on the specified port.
level level	Clears the specified maintenance level; valid values are from 0 to 7.
vlan vlan	(Optional) Clears the specified VLAN; valid values are from 1 to 4094.
mip	Clears the MIP configuration.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example show how to clear the MEP configuration for module 2, port 1 with a maintenance level of 4:

Console> (enable) clear port ethernet-cfm 2/1 mep level 4

MEP config on Port 2/1 is cleared.

Console> (enable)

This example shows how to clear the MIP configuration for module 6, port 1:

Console> (enable) clear port ethernet-cfm 2/1 mip

MIP config on Port 6/1 is cleared.

Console> (enable)

Related Commands

set port ethernet-cfm

show port ethernet-cfm

clear port ethernet-evc

To clear any Ethernet Virtual Connections (EVCs) associated to the User to Network Interface (UNI) or a specified EVC, use the clear port ethernet-evc command.

clear port ethernet-evc mod/port [evc_id]

Syntax Description

mod/port	Module number and port number.
evc_id	(Optional) EVC identifier.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear EVCs associated with module 7, port 1:

Console> (enable) clear port ethernet-evc 7/1

EVCs associated with port 7/1 are cleared.

Console> (enable)

Related Commands

set port ethernet-evc

show port ethernet-evc

clear port ethernet-lmi

To clear Ethernet Local Management Interface (ELMI) statistic counters for all ports or a specified port, use the clear port ethernet-lmi command.

clear port ethernet-lmi mod/port statistics

Syntax Description

mod/port	Module number and port number.
statistics	Displays ELMI statistics for mod/port.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear the ELMI statistics associated with module 7, port 1:

Console> (enable) clear port ethernet-lmi 7/1 statistics

Ethernet LMI statistics cleared on port 7/1.

Console> (enable)

Related Commands

set port ethernet-lmi

show port ethernet-lmi

clear port ethernet-oam

To clear the IEEE 802.3ah Operations, Administrations, and Maintenance (OAM) configuration on a specified port, use the clear port ethernet-oam command.

clear port ethernet-oam [mod/port]

clear port ethernet-oam [mod/port] statistics

clear port ethernet-oam mod/port {critical-event | link-fault} action

clear port ethernet-oam mod/port link-monitor {frame | frame-period | symbol-period}

{window | low-threshold | high-threshold}

Syntax Description

mod/port	Number of the module and the port on the module.
statistics	Clears OAM-related statistics.
critical-event	Clears the critical-event configuration.
link-fault	Clears the link-fault configuration.
action	Clears the specified action (critical-event or link-fault).
link-monitor	Clears the link-monitor configuration.
frame	Specifies monitoring by the number of frames with errors.
frame-period	Specifies monitoring by frame period.
symbol-period	Specifies monitoring by the number of symbols with errors.
window	Clears monitoring window.
low-threshold	Clears the low threshold and the corresponding action.
high-threshold	Clears the high threshold and the corresponding action.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you enter the clear port ethernet-oam mod/port without the statistics keyword, all OAM-related configurations are cleared on the specified ports. If you do not specify a port, all OAM-related configurations are cleared on all ports.

If you enter the statistics keyword, OAM-related counters are cleared on the specified port. If you do not specify a port, all OAM-related counters are cleared on all ports.

When you enter the low-threshold keyword or the high-threshold keyword, the corresponding associated action is also cleared.

Examples

This example shows how to clear OAM-related statistics on a specified port:

Console> (enable) clear port ethernet-oam 1/1 statistics

OAM counters cleared on port 1/1.

Console> (enable)

This example shows how to clear the high-threshold configuration for frame-period link monitoring:

Console> (enable) clear port ethernet-oam 1/1 link-monitor frame-period high-threshold

OAM errored frame period high-threshold set to default on port 1/1, and action set to 
default.

Console> (enable)

This example shows how to clear the action that a specified port takes in response to a link fault:

Console> (enable) clear port ethernet-oam 1/1 link-fault action

OAM link-fault event action set to default.

Console> (enable)

Related Commands

set port ethernet-oam
set port ethernet-oam action
set port ethernet-oam link-monitor
set port ethernet-oam mode
set port ethernet-oam remote-loopback
show port ethernet-oam

clear port ethernet-uni

To clear the User to Network Interface (UNI) configuration on the port, use the clear port ethernet-uni command.

clear port ethernet-uni mod/port [id | type]

Syntax Description

mod/port	Module number and port number.
id	(Optional) UNI identifier.
type	(Optional) UNI type.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you do not specify a keyword, all the UNI configuration is cleared.

Examples

This example shows how to clear the UNI configuration on module 7, port 1:

Console> (enable) clear port ethernet-uni 7/1

UNI configuration is cleared for port 7/1.

Console> (enable)

Related Commands

set port ethernet-uni

show port ethernet-uni

clear port flexlink

To clear an active-backup (peer) Flexlink pair of ports, use the clear port flexlink command.

clear port flexlink mod/port [peer mod/port]

Syntax Description

mod/port	Number of the module and the port on the module.
peer	(Optional) Specifies the peer port for the Flexlink active port.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear port 3/48 as the Flexlink active port and port 3/47 as the Flexlink backup (peer) port:

Console> (enable) clear port flexlink 3/48 peer 3/47

Port 3/48 and 3/47 flexlink pair cleared

Console> (enable)

Related Commands

set port flexlink
show port flexlink

clear port host

To clear the port configuration for optimizing a host connection, use the clear port host command.

clear port host mod/port

Syntax Description

mod/port

Number of the module and the port on the module.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported by the NAM.

The clear port host command sets channel mode to auto, disables spanning tree PortFast, and sets the trunk mode to auto.

Examples

This example shows how to remove specific roles from a port:

Console> (enable) clear port host 5/5

Port(s)  5/5 trunk mode set to auto.

Spantree port  5/5 fast start disabled.

Port(s) 5/5 channel mode set to auto.

Console> (enable)

Related Commands

set port host

clear port qos autoqos

To clear the automatic QoS configuration on a per-port basis, use the clear port qos autoqos command.

clear port qos mod/ports.. autoqos

Syntax Description

mod/ports..

Number of the module and ports on the module.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged mode.

Usage Guidelines

The clear port qos autoqos command is supported on all ports supporting port-based automatic QoS set  commands. All QoS settings configured through the automatic QoS port-based command revert back to factory default settings, except for QoS ACLs. QoS ACLs created for automatic QoS purposes are cleared through the global clear command.

All QoS ACLs mapped to the port are unmapped from the port, even if the QoS ACL is not related to automatic QoS.

Examples

This example shows how to clear the automatic QoS configuration on module 3, port 1:

Console> (enable) clear port qos 3/1 autoqos 

Port based QoS settings will be restored back to factory defaults for port 3/1.

Do you want to continue (y/n) [n]? y

Port 3/1 autoqos settings have been cleared.  

It is recommended to execute the "clear qos autoqos" global command if

not executed previously to clear global autoqos settings.

Console> (enable) 

Related Commands

clear qos autoqos
set port qos autoqos
set qos autoqos
show port qos
show qos info

clear port qos cos

To return the values set by the set port qos cos command to the default settings for all specified ports, use the clear port qos cos command.

clear port qos mod/ports.. cos

Syntax Description

mod/ports..

Number of the module and ports on the module.

Defaults

The default CoS for a port is 0.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to return the values set by the set port qos cos command to the default settings for module 2, port 1:

Console> (enable) clear port qos 2/1 cos

Port 2/1 qos cos setting cleared.

Console> (enable) 

Related Commands

set port qos cos
show port qos

clear port security

To clear all MAC addresses or a specific MAC address from the list of secure MAC addresses on a port, use the clear port security command.

clear port security mod/port mac_addr [all | vlan_list]

clear port security mod/port all [vlan_list]

Syntax Description

mod/port	Number of the module and the port on the module.
mac_addr	MAC address to be deleted.
all	(Optional) Clears secure MAC address for all VLANs on the port.
vlan_list	(Optional) List of VLANs for which the secure MAC address is cleared.
all	Clears all secure MAC addresses for the port.
vlan_list	(Optional) List of VLANs for which all secure MAC addresses are cleared.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

A secure MAC address can be part of different VLANs on a single port. The clear port security mod/port mac_addr [all | vlan_list] command allows you to clear a secure MAC address on all the VLANs of the port by entering the all keyword or on a set of VLANs by entering a vlan_list argument. If you do not enter the all keyword or a vlan_list argument, the secure MAC address is cleared on the native VLAN of the port, if a native VLAN exists.

The clear port security mod/port all [vlan_list] command allows you to clear all secure MAC addresses on either a per-VLAN basis or a per-port basis. If you enter the clear port security mod/port all command but do not enter a vlan_list argument, all secure MAC address on the port are cleared.

Examples

This example shows how to remove a specific MAC address from a list of secure addresses on the port:

Console> (enable) clear port security 4/1 00-11-22-33-44-55

00-11-22-33-44-55 cleared from secure address list list for port 4/1.

Console> (enable)

This example shows how to remove a secure MAC address from a list of VLANs:

Console> (enable) clear port security 3/37 00-00-aa-00-00-aa 20,30

Secure MAC address 00-00-aa-00-00-aa cleared for port 3/37 and Vlan 20.

Secure MAC address 00-00-aa-00-00-aa cleared for port 3/37 and Vlan 30.

Console> (enable)

This example shows how to remove a secure MAC address for all VLANs on a port:

Console> (enable) clear port security 3/37 00-00-aa-00-00-aa all

Secure MAC address 00-00-aa-00-00-aa cleared for port 3/37 and Vlan 1.

Secure MAC address 00-00-aa-00-00-aa cleared for port 3/37 and Vlan 20.

Secure MAC address 00-00-aa-00-00-aa cleared for port 3/37 and Vlan 30.

Console> (enable)

This example shows what happens if you clear a secure MAC address without specifying the all keyword or a specific list of VLANs. The MAC address is cleared on the native VLAN.

Console> (enable) clear port security 3/37 00-00-aa-00-00-aa 

Secure MAC address 00-00-aa-00-00-aa cleared for port 3/37 and Vlan 1.

Console> (enable)

This example shows how to remove all secure MAC addresses from a specific VLAN:

Console> (enable) clear port security 3/37 all 20

All secure mac addresses cleared on port 3/37 for vlan 20.

Console> (enable)

Related Commands

set port security
show port security

clear port vlan-mapping

To clear the VLAN mapping on a per-port basis, use the clear port vlan-mapping command.

clear port vlan-mapping {all | mod/port {source_vlan_id | all}}

Syntax Description

all	Clears VLAN mappings for all ports.
mod/port	Number of the module and the port on the module.
source_vlan_id	Number of the source VLAN; valid values are from 1 to 4094.
all	Clears VLAN mappings for the specified port.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

On some modules, VLAN mapping is supported on a per-ASIC basis; the mapping is not stored on a per-port basis. For these modules, entering clear port vlan-mapping mod/port clears the VLAN mapping on all ports on the ASIC.

When you enter a source_vlan_id argument, only the VLAN mapping for that source VLAN is cleared from the VLAN mapping table of the specified port or ASIC (if the port is an ASIC-based port).

Examples

This example shows how to clear the VLAN mapping for a specified port:

Console> (enable) clear port vlan-mapping 7/1 2002

VLAN mapping for VLAN 2002 removed from port 7/1-12.

Console> (enable)

Related Commands

set port vlan-mapping
show port vlan-mapping

clear port web-auth

To clear the mapping of an AAA fail policy for web-based authentication proxy on a specified port, use the clear port web-auth command.

clear port web-auth mod[/port] aaa-fail-policy

Syntax Description

mod[/port]	Number of the module and optionally, the port on the module.
aaa-fail-policy	Clears the mapping of a AAA fail policy.

Defaults

This command has not default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear an AAA fail policy on module 5, port 10:

Console> (enable) clear port web-auth 5/10 aaa-fail-policy

aaa-fail-policy cleared successfully on port 5/10

Console> (enable)

Related Commands

set port web-auth
show port web-auth

clear pvlan mapping

To delete a private VLAN mapping, use the clear pvlan mapping command.

clear pvlan mapping primary_vlan {isolated_vlan | community_vlan | twoway_community_vlan} mod/port

clear pvlan mapping mod/port

Syntax Description

primary_vlan	Number of the primary VLAN.
isolated_vlan	Number of the isolated VLAN.
community_vlan	Number of the community VLAN.
twoway_community_vlan	Number of the two-way community VLAN.
mod/port	Number of the module and promiscuous port.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you do not specify the mapping to clear, all the mappings of the specified promiscuous ports are cleared.

Examples

This example shows how to clear the mapping of VLAN 902 to 901, previously set on ports 3/2-5:

Console> (enable) clear pvlan mapping 901 902 3/2-5

Successfully cleared mapping between 901 and 902 on 3/2-5 
Console> (enable) 

Related Commands

clear config pvlan
clear vlan
set pvlan
set pvlan mapping
set vlan
show pvlan
show pvlan mapping
show vlan

clear qos acl

To remove various ACL configurations, use the clear qos acl command.

clear qos acl acl_name [editbuffer_index]

clear qos acl default-action {ip | ipx | mac | all}

clear qos acl map {acl_name} {mod/port | vlan} [input]

clear qos acl map {acl_name | mod/port | vlan | all} [input]

clear qos acl map {acl_name} {vlan | all} output

Syntax Description

acl_name	Unique name that identifies the list to which the entry belongs.
editbuffer_index	(Optional) ACE position in the ACL.
default-action	Removes default actions.
ip	Clears IP ACE default actions.
ipx	Clears IPX ACE default actions.
mac	Clears MAC-layer ACE default actions.
all	Clears all ACE default actions.
map	Detaches an ACL.
mod/port	Number of the module and the port on the module.
vlan	Number of the VLAN; valid values are from 1 to 4094.
all	Detaches an ACL from all interfaces.
input	(Optional) Removes the ACL from the ingress interface. See the "Usage Guidelines" section for more information.
output	Removes the ACL from the egress interface.

Defaults

The default is no ACLs are attached.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Changes you make by entering this command are saved to NVRAM and hardware only after you enter the commit command.

Use the show qos acl editbuffer command to display the ACL list.

If you do not specify a direction keyword (input or output), the system automatically specifies input.

Examples

This example shows how to detach an ACL from all interfaces:

Console> (enable) clear qos acl map my_acl all

Hardware programming in progress...

ACL my_acl is detached from all interfaces.

Console> (enable) 

This example shows how to detach an ACL from a specific VLAN:

Console> (enable) clear qos acl map ftp_acl 4

Hardware programming in progress...

ACL ftp_acl is detached from vlan 4.

Console> (enable) 

This example shows how to delete a specific ACE:

Console> (enable) clear qos acl my_ip_acl 1

ACL my_ip_acl ACE# 1 is deleted.

my_ip_acl editbuffer modified. Use `commit' command to apply changes.

Console> (enable) 

This example shows how to delete an ACL:

Console> (enable) clear qos acl my_ip_acl

ACL my_ip_acl is deleted.

my_ip_acl editbuffer modified. Use `commit' command to apply changes.

Console> (enable) 

This example shows how to detach a specific ACL from all interfaces:

Console> (enable) clear qos acl map my_acl all

Hardware programming in progress...

ACL my_acl is detached from all interfaces.

Console> (enable) 

This example shows how to detach a specific ACL from a specific VLAN:

Console> (enable) clear qos acl map ftp_acl 4

Hardware programming in progress...

ACL ftp_acl is detached from vlan 4.

Console> (enable) 

This example shows how to delete IP ACE default actions configured by the set qos acl default-action command:

Console> (enable) clear qos acl default-action ip

Hardware programming in progress...

QoS default-action for IP ACL is restored to default setting.

Console> (enable) 

This example shows how to clear Qos ACL mapping between an ACL named "test" and VLAN 1 on the ingress interface:

Console> (enable) clear qos acl map test 1

Successfully cleared mapping between ACL test and VLAN 1 on input side.

Console> (enable)

This example shows how to clear QoS ACL mapping between an ACL named "test2" and VLAN 1 on the egress interface:

Console> (enable) clear qos acl map test2 1 output

Successfully cleared mapping between ACL test2 and VLAN 1 on output side.

Console> (enable)

Related Commands

commit
rollback
set qos acl map
show qos acl editbuffer

clear qos autoqos

To return the global automatic QoS configuration to the factory default settings, use the clear qos autoqos command.

Syntax Description

This command has no arguments or keywords.

Defaults

This commands has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

QoS ACLs created through the set port autoqos commands are cleared through the global automatic clear qos autoqos command. Also, any policers used by automatic QoS ACLs are cleared.

The global automatic QoS clear command searches for automatic QoS ACL names. The search algorithm looks for names beginning with the following strings:

•ACL_IP-PHONES (for ciscoipphone)

•ACL_IP-SOFTPHONE (for ciscosoftphone)

•ACL_IP-TRUSTCOS (for trust cos)

•ACL_IP-TRUSTDSCP (for trust dscp)

Any QoS ACL starting with the above strings is considered an automatic QoS ACL and is cleared. If one is found and the QoS ACL is committed and not mapped to a port or a VLAN, it is deleted.

Similarly, the search algorithm looks for aggregate QoS policers starting with this name:

POLICE_SOFTPHONE-DSCP (for ciscosoftphone).

The global clear command searches for aggregate policer names that begin with POLICE_SOFTPHONE-DSCP. If a policer is found, and there is no QoS ACL associated with it, it is deleted. If a policer is found, and there is a QoS ACL associated with it, a warning is displayed indicating the policer is still in use.

Various error conditions can occur when the global clear command is used. If you have properly executed the port-based clear commands before using the global clear command, no error conditions should occur. However, if you execute the global clear command first or have modified the automatic QoS configuration, the following error conditions could occur:

•Automatic QoS ACLs still mapped to a port or VLAN

The global clear command will not clear automatic QoS ACLs that are still mapped to a VLAN or port. Instead, it displays a warning indicating the name of the QoS ACL still mapped to a port or VLAN.

•Aggregate policers still in use

If the automatic QoS policers found are still in use (referenced by a QoS ACL), the global clear command does not remove them. Instead, it displays the name of the aggregate policer.

•Uncommitted automatic QoS ACLs

The global clear command only removes committed automatic QoS ACLs; it ignores uncommitted automatic QoS ACLS.

Examples

This example shows how to return the global automatic QoS configuration to the factory default settings:

Console> (enable) clear qos autoqos

Its highly recommended to execute clear port autoqos commands prior

to the global clear command:

    clear port qos <mod/port> autoqos

Do you want to continue (y/n) [n]? y

........................

Autoqos ACL 'ACL_IP-SOFTPHONE-3-1' successfully deleted.

Cleared Autoqos policer 'POLICE_SOFTPHONE-DSCP46-3-1'

Cleared Autoqos policer 'POLICE_SOFTPHONE-DSCP26-3-1'

All ingress and egress QoS scheduling parameters set to factory default.

CoS to DSCP, DSCP to COS, IP Precedence to DSCP and policed dscp maps

configured.  Global Autoqos QoS cleared.

Console> (enable)

This example shows what is displayed under the various error conditions described in the "Usage Guidelines" section:

Console> (enable) clear qos autoqos

Its highly recommended to execute clear port autoqos commands prior

to the global clear command:

    clear port qos <mod/port> autoqos

Do you want to continue (y/n) [n]? y

........................

Autoqos ACL 'ACL_IP-SOFTPHONE-3-2' successfully deleted.

Autoqos ACL 'ACL_IP-SOFTPHONE-3-3' successfully deleted.

Autoqos ACL 'ACL_IP-SOFTPHONE-3-4' still mapped to port or vlan.

Autoqos ACL 'ACL_IP-SOFTPHONE-3-5' still mapped to port or vlan.

Autoqos ACL 'ACL_IP-SOFTPHONE-3-6' still mapped to port or vlan.

Cleared Autoqos policer 'POLICE_SOFTPHONE-DSCP46-3-2'

Cleared Autoqos policer 'POLICE_SOFTPHONE-DSCP26-3-2'

Cleared Autoqos policer 'POLICE_SOFTPHONE-DSCP46-3-3'

Cleared Autoqos policer 'POLICE_SOFTPHONE-DSCP26-3-3'

Could not clear Autoqos policer ''POLICE_SOFTPHONE-DSCP46-3-4', still in use.

QoS is disabled.

All ingress and egress QoS scheduling parameters set to factory default.

CoS to DSCP, DSCP to COS, IP Precedence to DSCP and policed dscp maps

configured.  Global Autoqos QoS cleared.

Console> (enable)

Related Commands

clear port qos autoqos
set port qos autoqos
set qos autoqos
show port qos
show qos info

clear qos config

To return the values that were set by the set qos command to the default settings and delete the CoS assigned to MAC addresses, use the clear qos config command.

Syntax Description

This command has no arguments or keywords.

Defaults

The default is QoS is disabled.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to return the values set by the set qos command to the default settings and delete the CoS assigned to MAC addresses:

Console> (enable) clear qos config

This command will disable QoS and take values back to factory default.

Do you want to continue (y/n) [n]? y

QoS config cleared.

Console> (enable) 

Related Commands

set qos
show qos info

clear qos cos-cos-map

To return the CoS-to-CoS map to the default setting, use the clear qos cos-cos-map command.

clear qos cos-cos-map

Syntax Description

This command has no arguments or keywords.

Defaults

The default CoS-to-CoS configuration is listed in Table 2-2.

Table 2-2 CoS-to-CoS Mapping

CoS	0	1	2	3	4	5	6	7
CoS	0	1	2	3	4	5	6	7

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The CoS-to-CoS map is also restored to the default configuration when you enter the clear config command or the clear qos config command.

Examples

This example shows how to clear the CoS-to-CoS map:

Console> (enable) clear qos cos-cos-map

QoS cos-cos-map setting restored to default.

Console> (enable)

Related Commands

set qos cos-cos-map
show qos maps

clear qos cos-dscp-map

To clear CoS-to-DSCP mapping set by the set qos cos-dscp-map command and return to the default setting, use the clear qos cos-dscp-map command.

clear qos cos-dscp-map

Syntax Description

This command has no arguments or keywords.

Defaults

The default CoS-to-DSCP configuration is listed in Table 2-3.

Table 2-3 CoS-to-DSCP Default Mapping

CoS	0	1	2	3	4	5	6	7
DSCP	0	8	16	24	32	40	48	56

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear the CoS-to-DSCP mapping table:

Console> (enable) clear qos cos-dscp-map

QoS cos-dscp-map setting restored to default.

Console> (enable) 

Related Commands

set qos cos-dscp-map
show qos maps

clear qos dscp-cos-map

To clear DSCP-to-CoS mapping set by the set qos dscp-cos-map command and return to the default setting, use the clear qos dscp-cos-map command.

clear qos dscp-cos-map

Syntax Description

This command has no arguments or keywords.

Defaults

The default DSCP-to-CoS configuration is listed in Table 2-4.

Table 2-4 DSCP-to-CoS Default Mapping

DSCP	0 to 7	8 to 15	16 to 23	24 to 31	32 to 39	40 to 47	48 to 55	56 to 63
CoS	0	1	2	3	4	5	6	7

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear the DSCP-to-CoS mapping table:

Console> (enable) clear qos dscp-cos-map

QoS dscp-cos-map setting restored to default.

Console> (enable) 

Related Commands

set qos dscp-cos-map
show qos maps

clear qos dscp-mutation-map

To clear DSCP mutation mapping, use the clear qos dscp-mutation-map command.

clear qos dscp-mutation-map {mutation_table_id | all}

Syntax Description

mutation_table_id	Number of the mutation table to be cleared; valid values are from 1 to 15.
all	Clears all mutation mapping.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is available only on PFC3.

Examples

This example shows how to clear all VLANs in the mutation map with mutation table number 2:

Console> (enable) clear qos dscp-mutation-map 2

All VLANS in mutation-table-id 2 are cleared.

Console> (enable)

Related Commands

clear qos dscp-mutation-table-map
set qos dscp-mutation-map
set qos dscp-mutation-table-map
show qos maps

clear qos dscp-mutation-table-map

To clear the DSCP mutation table map, use the clear qos dscp-mutation-table-map command.

clear qos dscp-mutation-table-map {all | vlan | {id mutation_table_id}}

Syntax Description

all	Clears all VLANs from DSCP mutation table mapping.
vlan	Numbers of the VLANs to be cleared from DSCP mutation table mapping.
id mutation_table_id	Clears a specified DSCP mutation table; valid values are from 1 to 15.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is available only on PFC3.

Examples

This example shows how to clear VLANs 3 through 33 from the mutation tables:

Console> (enable) clear qos dscp-mutation-table-map 3-33

VLAN(s) 3-33 are removed from mutation-id-maps.

Console> (enable)

This example shows how to clear all VLANs from the mutation tables:

Console> (enable) clear qos dscp-mutation-table-map all

All VLANs are removed from mutation-id-maps.

Console> (enable)

This example shows how to clear mutation table 3:

Console> (enable) clear qos dscp-mutation-table-map id 3

QoS dscp-mutation-map for mutation-table-id 3 is restored to default.

Console> (enable)

Related Commands

clear qos dscp-mutation-map
set qos dscp-mutation-map
set qos dscp-mutation-table-map
show qos maps

clear qos ipprec-dscp-map

To reset the mapping set by the set qos ipprec-dscp-map command to the default setting, use the clear qos ipprec-dscp-map command.

clear qos ipprec-dscp-map

Syntax Description

This command has no arguments or keywords.

Defaults

The default IP precedence-to-DSCP configuration is listed in Table 2-5.

Table 2-5 IP Precedence-to-DSCP Default Mapping

IPPREC	0	1	2	3	4	5	6	7
DSCP	0	8	16	24	32	40	48	56

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear the IP precedence-to-DSCP mapping table:

Console> (enable) clear qos ipprec-dscp-map

QoS ipprec-dscp-map setting restored to default.

Console> (enable) 

Related Commands

set qos ipprec-dscp-map
show qos maps

clear qos mac-cos

To clear the values set by the set qos mac-cos command, use the clear qos mac-cos command.

clear qos mac-cos dest_mac [vlan]

clear qos mac-cos all

Syntax Description

dest_mac	Number of the destination host MAC address.
vlan	(Optional) Number of the VLAN; valid values are from 1 to 4094.
all	Clears CoS values for all MAC/VLAN pairs.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If the vlan value is not entered, all entries for the MAC address are cleared.

Examples

This example shows how to clear the values set by the set qos mac-cos command and return to the default settings for all MAC address and VLAN pairs:

Console> (enable) clear qos mac-cos all

All CoS to Mac/Vlan entries are cleared.

Console> (enable) 

This example shows how to clear the values set by the set qos mac-cos command and return to the default settings for a specific MAC address:

Console> (enable) clear qos mac-cos 1-2-3-4-5-6 1

CoS to Mac/Vlan entry for mac 01-02-03-04-05-06 vlan 1 is cleared.

Console> (enable) 

Related Commands

set qos mac-cos
show qos mac-cos

clear qos map

To return the values to the default settings, use the clear qos map command.

clear qos map port_type tx | rx

Syntax Description

port_type	Port type; valid values are 2q2t, 1p3q1t, and 1p2q2t for transmit and 1p1q4t and 1p1q0t for receive. See the "Usage Guidelines" section for additional information.
tx | rx	Specifies the transmit or receive queue.

Defaults

The default mappings for all ports are shown in Table 2-6 and Table 2-7 and apply to all ports.

Table 2-6 Default Transmit Queue and Drop-Threshold Mapping of CoS Values

Port Type	Drop Threshold Type	Low Delay (Queue 2)	High Delay (Queue 1)	Priority Delay (Queue 3)
2q2t	Low drop (Threshold 2)	7, 6	3, 2	N/A
	High drop (Threshold 1)	5, 4	1, 0	N/A
1p2q2t	Low drop (Threshold 2)	7	3, 2	N/A
	High drop (Threshold 1)	5, 4	1, 0	5

Table 2-7 Default Receive Drop-Threshold Mapping of CoS Values

Port Type	Threshold 1 (highest drop)	Threshold 2	Threshold 3	Threshold 4 (lowest drop)	Priority Queue
1p1q0t	0, 1	2, 3	4, 5	7	6
1p1q4t	0, 1	2, 3	4, 5	7	6

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The 1p2q1t and 1p1q8t port types are not supported.

Examples

This example shows how to return the values to the default settings:

Console> (enable) clear qos map 2q2t

This command will take map values back to factory default.

QoS map cleared.

Console> (enable) 

Related Commands

set qos map
show qos maps

clear qos policed-dscp-map

To reset the policer-to-dscp mapping table to the defaults, use the clear qos policed-dscp-map.

clear qos policed-dscp-map [normal-rate | excess-rate]

Syntax Description

normal-rate	(Optional) Restores the map associated with the normal rate to the default value. See the "Usage Guidelines" section for more information.
excess-rate	(Optional) Restores the map associated with the excess rate to the default value.

Defaults

The default is the identity function; for example, DSCP 63 to policed DSCP 63 and DSCP 62 to policed DSCP 62.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you do not specify the normal-rate keyword or the excess-rate keyword, only normal rate mappings are cleared and restored to the default settings.

Examples

This example shows how to reset the normal rate mapping to the default settings:

Console> (enable) clear qos policed-dscp-map

QoS normal-rate policed-dscp-map setting restored to default.

Console> (enable)

This example shows how to reset the excess rate mapping to the default settings:

Console> (enable) clear qos policed-dscp-map excess-rate

QoS excess-rate policed-dscp-map setting restored to default.

Console> (enable)

Related Commands

set qos policed-dscp-map
show qos maps

clear qos policer

To clear policing rules from NVRAM, use the clear qos policer command.

clear qos policer microflow microflow_name | all

clear qos policer aggregate aggregate_name | all

Syntax Description

microflow microflow_name	Specifies the name of the microflow policing rule.
aggregate aggregate_name	Specifies the name of the aggregate policing rule.
all	Clears all policing rules.

Defaults

This command has no default setting in systems configured with the Supervisor Engine 1 with Layer 3 Switching Engine (PFC); in systems configured with Supervisor Engine 2 with Layer 3 Switching Engine II (PFC2), the default is to apply the given map to the normal rate only.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Policing is the process by which the switch limits the bandwidth consumed by a flow of traffic. Policing can mark or drop traffic.

You cannot clear an entry that is currently being used in an ACE. You must first detach the ACEs from the interface.

You cannot use the all keyword if a microflow rate limit is currently being used in an ACE.

The normal and excess keywords are supported on systems configured with the Supervisor Engine 2 with Layer 3 Switching Engine II (PFC2) only. With these keywords, you can specify a map for the normal rate and one for the excess rate. Because this selection is optional in the CLI, the default (unspecified) action is to apply the given map to the normal rate only.

Examples

This example shows how to clear a specific microflow policing rule:

Console> (enable) clear qos policer microflow my_micro 

my_micro QoS microflow policer cleared.

Console> (enable) 

This example shows how to clear all microflow policing rules:

Console> (enable) clear qos policer microflow all

All QoS microflow policers cleared.

Console> (enable) 

This example shows how to clear a specific aggregate policing rule:

Console> (enable) clear qos policer aggregate my_micro 

my_micro QoS microflow policer cleared.

Console> (enable) 

This example shows how to clear all aggregate policing rules:

Console> (enable) clear qos policer aggregate all

All QoS aggregate policer cleared.

Console> (enable)

Related Commands

set qos policer
show qos policer

clear qos statistics

To clear QoS statistic counters, use the clear qos statistics command.

clear qos statistics [aggregate-policer [policer_name]]

Syntax Description

aggregate-policer	(Optional) Clears QoS aggregate policer statistics.
policer_name	(Optional) Name of the aggregate policer.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you enter the clear qos statistics command without the entering the aggregate-policer keyword, all QoS statistics are cleared, including all QoS aggregate policer statistics.

If you enter the aggregate-policer keyword without specifying a policer name, all aggregate policer statistics are cleared.

Examples

This example shows how to clear the QoS statistic counters:

Console> (enable) clear qos statistics

QoS statistical cleared.

Console> (enable)

This example shows how to clear all QoS aggregate policer statistics:

Console> (enable) clear qos statistics aggregate-policer

QoS aggregate policers statistical counters cleared.

Console> (enable)

This example shows how to clear the QoS aggregate policer statistics for aggr_1:

Console> (enable) clear qos statistics aggregate-policer aggr_1

Aggregate policer 'aggr_1' statistical counters cleared.

Console> (enable)

Related Commands

show qos statistics

clear radius

To clear one or all of the RADIUS servers from the RADIUS server table or remove a shared key entry, use the clear radius command.

clear radius server all

clear radius server ipaddr

clear radius key

Syntax Description

server	Specifies RADIUS servers.
all	Specifies all RADIUS servers.
ipaddr	Number of the IP address or IP alias.
key	Specifies the RADIUS shared key.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The ipaddr value is an IP alias or an IP address in dot notation; for example, 101.102.103.104.

Examples

This example shows how to clear the RADIUS key:

Console> (enable) clear radius key

Radius server key cleared.

Console> (enable) 

This example shows how to clear a specific RADIUS server from the RADIUS server table:

Console> (enable) clear radius server 128.56.45.32

128.56.45.32 cleared from radius server table.

Console> (enable) 

Related Commands

set radius key
set radius server
show radius

clear rcp

To clear rcp information for file transfers, use the clear rcp command.

clear rcp

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear rcp information:

Console> (enable) clear rcp

Console> (enable) 

Related Commands

set rcp username
show rcp

clear rgmp statistics

To clear RGMP statistics information for all VLANs, use the clear rgmp statistics command.

clear rgmp statistics

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear the RGMP statistics on the switch:

Console> (enable) clear rgmp statistics 

RGMP statistics cleared.

Console> (enable)

Related Commands

set rgmp
show rgmp statistics

clear security acl

To remove a specific access control entry (ACE) or all ACEs from a VACL and to delete the VACLs from the edit buffer, use the clear security acl command.

clear security acl all

clear security acl acl_name

clear security acl capture-ports {all | mod/ports}

clear security acl log flow

clear security acl acl_name [editbuffer_index]

clear security acl adjacency adjacency_name

clear security acl map {acl_name [vlan] | vlan | all}

clear security acl arp-inspection statistics [acl_name]

Syntax Description

all	Removes ACEs for all the VACLs.
acl_name	Name of the VACL whose ACEs are to be removed.
capture-ports	Removes ports from the capture list.
all	Removes all ports from the capture list.
mod/ports	Variable to remove specific port from the capture list; mod/num is the number of the module and the port on the module.
log flow	Removes logging table flow entries.
editbuffer_index	(Optional) Index number of the ACE in the VACL.
adjacency	Removes an adjacency ACE.
adjacency_name	Name of the adjacency ACE.
map	Clears security ACL to a VLAN mapping.
vlan	Variable to clear ACL mappings for a specific VLAN.
all	Clears all ACL VLAN mappings.
arp-inspection statistics	Clears ARP inspection statistics.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Changes you make by entering this command are saved to NVRAM and hardware only after you enter the commit command.

Use the show security acl command to display the VACL list.

The adjacency ACE cannot be cleared before the redirect ACE. The redirect ACE and the adjacency ACE in PBF VACLs should be cleared in the following order:

1. Clear the redirect ACE.

2. Commit the VACL.

3. Clear the adjacency ACE.

4. Commit the adjacency.

When you enter the clear security acl arp-inspection statistics command, if you do not specify an ACL name, the system clears all counters for ARP inspection global statistics and ARP inspection statistics for all ACLs.

Examples

This example shows how to remove ACEs for all the VACLs:

Console> (enable) clear security acl all

All editbuffer modified. Use `commit' command to apply changes.

Console> (enable)

This example shows how to remove a specific ACE from a specific VACL:

Console> (enable) clear security acl IPACL1 2

IPACL1 editbuffer modified. Use `commit' command to apply changes.

Console> (enable)

This example shows how to remove an adjacency ACE:

Console> (enable) clear security acl adjacency a_1

a_1 editbuffer modified. Use 'commit' command to apply changes.

Console> (enable)

This example shows how to clear the ARP inspection global statistics and the ARP inspection statistics for all ACLs:

Console> (enable) clear security acl arp-inspection statistics

Console> (enable)

Related Commands

commit
rollback
set security acl arp-inspection
show security acl

clear security acl capture-ports

To remove a port from the capture port list, use the clear security acl capture-ports command.

clear security acl capture-ports {mod/ports...}

Syntax Description

mod/ports...

Number of the module and the ports on the module.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Configurations you make by entering this command are saved in NVRAM. This command does not require that you enter the commit command.

If you have several ports and a few are removed, the remaining ports continue to capture the traffic.

Examples

This example shows how to remove entries from the capture port list:

Console> (enable) clear security acl capture-ports 1/1,2/1

Successfully cleared the following ports:

1/1,2/1

Console> (enable) 

Related Commands

set security acl capture-ports
show security acl capture-ports

clear security acl counters

To clear the statistics for all ACEs on all ACLs, use the clear security acl counters command.

clear security acl counters

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command clears all statistics counters that were activated by entering the set security acl statistics command.

Examples

This example shows how to clear the statistics for all ACEs on all ACLs:

Console> (enable) clear security acl counters 

Operation Successful.

Console> (enable)

Related Commands

clear security acl statistics
set security acl statistics

clear security acl cram

To disable compression and reordering of ACL masks (CRAM) in automatic mode, use the clear security acl cram command.

clear security acl cram {auto}

Syntax Description

auto	Disables CRAM in automatic mode.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The CRAM feature can be run in automatic or manual mode. The clear security acl cram auto command disables automatic mode. Automatic mode executes the CRAM feature whenever the TCAM is full or whenever a specified CRAM timer interval has elapsed.

Entering this command also returns the CRAM timer back to the default timer interval (300 seconds). If you reenable CRAM by entering the set security acl cram auto command, the default timer interval takes effect.

---

Note With software release 8.4(1), the CRAM feature is only supported for security ACLs. The CRAM feature works for QoS ACLs but you cannot specifically run the feature on QoS ACLs.

---

Examples

This example shows how to disable CRAM in automatic mode:

Console> (enable) clear security acl cram auto

Cram auto mode disabled.

Console> (enable)

Related Commands

set security acl cram
show security acl cram

clear security acl log flow

To clear all flows in the security ACL log table, use the clear security acl log flow command.

clear security acl log flow

Syntax Description

This command has no keywords or arguments.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is supported on systems configured with Supervisor Engine 2 with Layer 3 Switching Engine II (PFC2) only.

Examples

This example shows how to clear all flows in the security ACL log table:

Console> (enable) clear security acl log flow   

Security acl log table cleared successfully

Console> (enable) 

Related Commands

set security acl log
show security acl log

clear security acl map

To remove VACL-to-VLAN mapping, use the clear security acl map command.

clear security acl map acl_name vlan

clear security acl map {acl_name | vlan | all}

Syntax Description

acl_name	Name of the VACL on which a VLAN is to be deleted.
vlan	Number of the VLAN on which a mapping is to be deleted; valid values are from 1 to 4094.
all	Removes all VACL-to-VLAN mappings.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Changes you make by entering this command are saved to NVRAM; you do not need to enter the commit command.

Use the show security acl command to display the ACL list.

Examples

This example shows how to remove a VACL-to-VLAN mapping from a specific VLAN:

Console> (enable) clear security acl map ip1 3

Map deletion in progress.

Successfully cleared mapping between ACL ip1 and VLAN 3.

Console> (enable)

This example shows how to remove a specific VACL-to-VLAN mapping from all VLANs:

Console> (enable) clear security acl map ip1

Map deletion in progress.

Successfully cleared mapping between ACL ip1 and VLAN 5.

Successfully cleared mapping between ACL ip1 and VLAN 8.

Console> (enable)

This example shows how to remove all VACL-to-VLAN mappings from a specific VLAN:

Console> (enable) clear security acl map 5

Map deletion in progress.

Successfully cleared mapping between ACL ipx1 and VLAN 5.

Successfully cleared mapping between ACL mac2 and VLAN 5.

Console> (enable)

This example shows how to remove all VACL-to-VLAN mappings from all VLANs:

Console> (enable) clear security acl map all

Map deletion in progress.

Successfully cleared mapping between ACL ip2 and VLAN 12.

Successfully cleared mapping between ACL ipx1 and VLAN 12.

Successfully cleared mapping between ACL ipx1 and VLAN 45.

Successfully cleared mapping between ACL ip2 and VLAN 47.

Successfully cleared mapping between ACL ip3 and VLAN 56.

Console> (enable)

Related Commands

commit
rollback
show security acl

clear security acl statistics

To disable the collection of statistics for all ACEs in a specified ACL, use the clear security acl statistics command.

clear security acl statistics acl_name

Syntax Description

acl_name

Name of the ACL.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The clear security acl statistics command disables the collection of statistics for all ACEs in the ACL that you specify. This command only works for ACL statistics that are configured on a per-ACL basis. The command does not work for ACL statistics configured on a per-VLAN or per-ACE basis. This command is effective only after you enter the commit command to commit all ACEs to NVRAM.

Examples

This example shows how to disable the collection of statistics for all ACEs in the specified ACL:

Console> (enable) clear security acl statistics ACL1 

ACL1 editbuffer modified. Use 'commit' command to save changes.

Console> (enable) commit security acl ACL1

ACL commit in progress.

ACL 'ACL1' successfully committed.

Console> (enable)

Related Commands

clear security acl counters
set security acl statistics

clear snmp access

To remove the access rights of an SNMP group, use the clear snmp access command.

clear snmp access [-hex] {groupname} {security-model {v1 | v2c}}

clear snmp access {security-model v3 {noauthentication | authentication | privacy}}
[context [-hex] contextname]

Syntax Description

-hex	(Optional) Displays the groupname or contextname in a hexadecimal format.
groupname	SNMP access table name.
security-model v1 | v2c	Specifies the security model v1 or v2c.
security-model v3	Specifies security model v3.
noauthentication	Specifies groups with security model type set to noauthentication.
authentication	Specifies groups with security model type authentication protocol.
privacy	Specifies groups with security model type privacy.
context contextname	(Optional) Specifies the name of a context string.

Defaults

The default contextname is a NULL string.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you use special characters for groupname (nonprintable delimiters for this parameter), you must use a hexadecimal keyword, which is one or two hexadecimal digits separated by a colon (:); for example, 00:ab:34.

If you do not enter a context name, a NULL context string is used.

Examples

This example shows how to clear SNMP access for a group:

Console> (enable) clear snmp access cisco-group security-model v3 authentication

Cleared snmp access cisco-group version v3 level authentication.

Console> (enable) 

Related Commands

set snmp access
show snmp access
show snmp context

clear snmp access-list

To clear the IP address of a host that is associated with an access list number, use the clear snmp access-list command.

clear snmp access-list access_number IP_address [[IP_address] ...]

Syntax Description

access_number	Number that specifies a list of hosts that are permitted to use a specific community string; valid values are 1 to 65535.
IP_address	IP address that is associated with the access list. See the "Usage Guidelines" section for more information.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you specify more than one IP address, separate each IP address with a space.

Examples

This example shows how to clear the IP address of a host from access list number 2:

Console> (enable) clear snmp access-list 2 172.20.60.8

Access number 2 no longer associated with 172.20.60.8

Console> (enable)

This example shows how to clear all IP address from access list number 101:

Console> (enable) clear snmp access-list 101

All IP addresses associated with access-number 101 have been cleared.

Console> (enable)

Related Commands

set snmp access-list

clear snmp community

To clear an SNMP community table, use the clear snmp community command.

clear snmp community index [-hex] {index_name}

Syntax Description

index	Specifies clearing an index.
-hex	(Optional) Displays the index_name value in a hexadecimal format.
index_name	Name of the SNMP index.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you use special characters for the index_name value (nonprintable delimiters for this parameter), you must use a hexadecimal keyword, which is one or two hexadecimal digits separated by a colon (:); for example, 00:ab:34.

If you do not enter an index_name value, a NULL context string is used.

Examples

This example shows how to clear SNMP access for a group:

Console> (enable) clear snmp community index ind1

Cleared snmp community ind1.

Console> (enable) 

Related Commands

set snmp community
show snmp community

clear snmp community-ext

To clear an existing community string, use the clear snmp community-ext command.

clear snmp community-ext community_string

Syntax Description

community_string

Name of the SNMP community.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

When you clear a community string, corresponding entries in the vacmAccessTable and vacmSecurityToGroup tables are also removed.

Examples

This example shows how to clear an existing community string:

Console> (enable) clear snmp community-ext public1

Community string public1 has been removed.

Console>(enable)

Related Commands

set snmp community-ext

clear snmp group

To remove the SNMP user from an SNMP group, use the clear snmp group command.

clear snmp group [-hex] groupname {user [-hex] username} {security-model {v1 | v2c | v3}}

Syntax Description

-hex	(Optional) Displays the groupname and username as a hexadecimal format.
groupname	Name of the SNMP group that defines an access control.
user	Specifies the SNMP group username.
username	Name of the SNMP user.
security model v1 | v2c | v3	Specifies security model v1, v2c, or v3.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you use special characters for the groupname value or the username value (nonprintable delimiters for these parameters), you must use a hexadecimal keyword, which is one or two hexadecimal digits separated by a colon (:); for example, 00:ab:34.

Examples

This example shows how to remove an SNMP user from a group:

Console> (enable) clear snmp group cisco-group user joe security-model v3

Cleared snmp group cisco-group user joe version v3.

Console> (enable)

Related Commands

set snmp group
show snmp group

clear snmp ifalias

To clear an SNMP interface alias, use the clear snmp ifalias command.

clear snmp ifalias {ifindex | all}

Syntax Description

ifindex	Interface index number.
all	Clears all interface aliases.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear SNMP interface index 1:

Console> (enable) clear snmp ifalias 1

Console> (enable)

This example shows how to clear all SNMP interface aliases:

Console> (enable) clear snmp ifalias all

Console> (enable)

Related Commands

set snmp ifalias
show snmp ifalias

clear snmp inform

To clear the SNMP inform request configuration, use the clear snmp inform command.

clear snmp inform all

clear snmp inform rcvr_address

clear snmp inform index rcvr_index

Syntax Description

all	Clears all SNMP inform request receivers and resets the size of the inform request queue to 100.
rcvr_address	IP address or IP alias of the SNMP inform request receiver to be cleared.
index rcvr_index	Clears the unique index that corresponds to the specified index number; valid values are from 1 to 65535.

Defaults

When you enter clear snmp inform all, the SNMP inform request queue is reset to 100, which is the default size of the queue.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This examples shows how to clear all SNMP inform request receivers and reset the size of the queue to the default:

Console> (enable) clear snmp inform all

All SNMP inform receivers cleared.

Size of inform queue has been reset to default.

Console> (enable)

Related Commands

set snmp inform
show snmp inform

clear snmp notify

To clear the SNMP notifyname in the snmpNotifyTable, use the clear snmp notify command.

clear snmp notify [-hex] {notifyname}

Syntax Description

-hex	(Optional) Displays the notifyname value as a hexadecimal format.
notifyname	Identifier to index the snmpNotifyTable.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you use special characters for the notifyname value (nonprintable delimiters for this parameter), you must use a hexadecimal keyword, which is one or two hexadecimal digits separated by a colon (:); for example, 00:ab:34.

Examples

This example shows how to clear an SNMP notifyname from the snmpNotifyTable:

Console> (enable) clear snmp notify joe

Cleared SNMP notify table joe.

Console> (enable) 

Related Commands

set snmp notify
show snmp notify

clear snmp targetaddr

To clear the SNMP target address entry in the TargetAddressTable, use the clear snmp targetaddr command.

clear snmp targetaddr [-hex] {addrname}

Syntax Description

-hex	(Optional) Displays the addrname value as a hexadecimal format.
addrname	Name of the target agent; the maximum length is 32 bytes.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you use special characters for the addrname value (nonprintable delimiters for this parameter), you must use a hexadecimal keyword, which is one or two hexadecimal digits separated by a colon (:); for example, 00:ab:34.

Examples

This example shows how to clear an SNMP target address entry in the snmpTargetAddressTable:

Console> (enable) clear snmp targetaddr joe

Cleared SNMP targetaddr joe.

Console> (enable)

Related Commands

set snmp targetaddr
show snmp targetaddr

clear snmp targetparams

To clear the SNMP target parameters used in the snmpTargetParamsTable, use the clear snmp targetparams command.

clear snmp targetparams [-hex] {paramsname}

Syntax Description

-hex	(Optional) Displays the paramsname value as a hexadecimal format.
paramsname	Name of the target parameter in the snmpTargetParamsTable; the maximum length is 32 bytes.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you use special characters for the paramsname value (nonprintable delimiters for this parameter), you must use a hexadecimal keyword, which is one or two hexadecimal digits separated by a colon (:); for example, 00:ab:34.

Examples

This example shows how to remove the SNMP target parameters:

Console> (enable) clear snmp targetparams joe

Cleared SNMP targetparams table joe.

Console> (enable) 

Related Commands

set snmp targetparams
show snmp targetparams

clear snmp trap

To clear an entry from the SNMP trap receiver table, use the clear snmp trap command.

clear snmp trap {rcvr_addr} [all]

Syntax Description

rcvr_addr	IP address or IP alias of the trap receiver (the SNMP management station) to clear.
all	(Optional) Specifies every entry in the SNMP trap receiver table.

Defaults

The default configuration has no entries in the SNMP trap receiver table.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear an entry from the SNMP trap receiver table:

Console> (enable) clear snmp trap 192.122.173.82

SNMP trap receiver deleted.

Console> (enable)

Related Commands

set snmp trap
show port counters
test snmp trap

clear snmp user

To remove an SNMP user, use the clear snmp user command.

clear snmp user [-hex] {username} [remote engineid]

Syntax Description

-hex	(Optional) Displays the username value as a hexadecimal format.
username	Name of the user on the host that connects to the agent.
remote engineid	(Optional) Specifies the username value on a remote SNMP engine.

Defaults

If a remote engine ID is not provided, the default local SNMP engine ID is used.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you use special characters for the username value (nonprintable delimiters for this parameter), you must use a hexadecimal keyword, which is one or two hexadecimal digits separated by a colon (:); for example, 00:ab:34.

Examples

This example shows how to remove a user from an SNMP group:

Console> (enable) clear snmp user joe

Cleared SNMP user joe.

Console> (enable) 

This example shows how to remove a user on a remote SNMP engine:

Console> (enable) clear snmp user joe remote 00:00:00:09:00:d0:00:4c:18:00

Cleared SNMP user.

Console> (enable) 

Related Commands

set snmp user
show snmp user

clear snmp view

To remove the MIB view entry from the vacmViewTreeFamilyTable, use the clear snmp view command.

clear snmp view [-hex] {viewname subtree}

Syntax Description

-hex	(Optional) Displays the viewname value as a hexadecimal format.
viewname	Name of a MIB view.
subtree	Name of the subtree.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you use special characters for the viewname value (nonprintable delimiters for this parameter), you must use a hexadecimal keyword, which is one or two hexadecimal digits separated by a colon (:); for example, 00:ab:34.

A MIB subtree used with a mask defines a view subtree that can be in OID format or a text name mapped to a valid OID.

Examples

This example shows how to clear the SNMP MIB viewname:

Console> (enable) clear snmp view myview 1.1.3

Cleared snmp view myview with subtree 1.1.3

Console> (enable)

Related Commands

set snmp view
show snmp view

clear spantree detected-protocols

To detect legacy bridges and the boundary ports of the MST region, use the clear spantree detected-protocols command.

clear spantree detected-protocols mod/port

Syntax Description

mod/port

Number of the module and the port on the module. See "Usage Guidelines" for more information.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The clear spantree detected-protocols command is available in MST mode and Rapid-PVST+ mode only and is not saved in NVRAM. If you do not specify a mod/port number when you enter the clear spantree detected-protocols command, protocol detection occurs on all connected ports.

The clear spantree detected-protocols command and the set spantree mst redetect-protocol command have the same functionality.

Examples

This example shows how to set protocol detection of legacy bridges and boundary ports on port 2 or module 3:

Console> (enable) clear spantree detected-protocols 3/2

Spanning tree protocol detection forced on port 3/2

Console> (enable)

Related Commands

clear spantree mst
set spantree mode
set spantree mst config

clear spantree mst

To clear the mapping of VLANs to an MST instance or to revert a port that is in pre-standard MST mode back to standard MST mode, use the clear spantree mst command.

clear spantree mst instance [vlan vlans]

clear spantree mst mod/port pre-std

Syntax Description

instance	Number of the instance; valid values are from 0 to 4094.
vlan vlans	(Optional) Specifies the VLAN number; valid values are from 1 to 4094.
mod/port	Number of the module and the port on the module
pre-std	Reverts a port that is in pre-standard MST mode back to standard MST mode (IEEE Std 802.1s). See the "Usage Guidelines" section for more information.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you enter only one instance number, you also can enter a VLAN number. If you enter a range of instance numbers, you cannot enter a VLAN number.

If you do not specify a VLAN, all VLANs are unmapped from the specified instance and added to MST instance 0 (IST).

Entering the clear spantree mst mod/port pre-std commands reverts a port that is in pre-standard MST mode back to standard MST mode. Pre-standard MST is the implementation of MST that is not compliant with with IEEE Std 802.1s. MST implementation is pre-standard on Catalyst 6500 series switches that are running software before release 8.3(1) . MST implementation is pre-standard on Catalyst 6500 series switches that are running any Cisco IOS software release. In standard MST mode, a port on a neighbor that is in pre-standard MST mode might become a boundary port, even though both switches have the same MST configuration.

The set spantree mst mod/port auto command also reverts a port back to standard MST mode.

Examples

This example shows how to clear VLAN 2 from MST instance 2:

Console> (enable) clear spantree mst 2 vlan 2

Console> (enable)

This example shows how to revert a port back to standard MST mode:

Console> (enable) clear spantree mst 4/47 pre-std

Pre-Std Neighbor type cleared on port 4/47.

Console> (enable)

Related Commands

set spantree mst
show spantree mst

clear spantree portcost

To clear the port cost of a port on the switch, use the clear spantree portcost command.

clear spantree portcost mod/port [mst]

Syntax Description

mod/port	Number of the module and the port on the module.
mst	(Optional) Restores the default path cost to an MST instance on a port.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to restore the default path cost on a port:

Console> (enable) clear spantree portcost 3/1

Port 3/1 is using the cost 0.

Console> (enable)

This example shows how to restore the default path cost to all MST instances on a port:

Console> (enable) clear spantree portcost 8/1 mst

Port 8/1 MST is using the cost 20000 in MST mode.

Console> (enable)

Related Commands

set spantree portcost
show spantree statistics

clear spantree portinstancecost

To restore the default path cost to an instance on a port, use the clear spantree portinstancecost command.

clear spantree portinstancecost mod/port [mst] instances

Syntax Description

mod/port	Number of the module and the port on the module.
mst	(Optional) Restores the default path cost to an MST instance on a port.
instances	Number of the instance; valid values are from 0 to 15.

Defaults

The default path cost is based on port speed; see Table 2-8 for default settings.

Table 2-8 Default Port Cost—Short Mode

Port Speed	Default Port Cost
4 Mb	250
10 Mb	100
16 Mb	62
100 Mb	19
155 Mb	14
1 Gb	4
10 Gb	2

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is valid in MISTP and MST modes only.

Examples

This example shows how to restore the default path cost to an instance on a port:

Console> (enable) clear spantree portinstancecost 5/1 2

Port 5/1 mistp-instance 1-16 have path cost 200000.

Console> (enable)

This example shows how to restore the default path cost to all MST instances on a port:

Console> (enable) clear spantree portinstancecost 8/1 mst 0-15

Port 8/1 MST Instance 0-15 have path cost 20000.

Console> (enable)

Related Commands

set spantree portinstancecost
show spantree statistics

clear spantree portinstancepri

To restore the default path cost to an instance on a port, use the clear spantree portinstancepri command.

clear spantree portinstancepri mod/port [mst] [instances]

Syntax Description

mod/port	Number of the module and the port on the module.
mst	(Optional) Resets the spanning tree port MST instance priority.
instances	(Optional) Number of the instance; valid values are from 0 to 15.

Defaults

The default is the port priority is set to 0 with no instances specified.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is valid in MISTP and MST modes only.

Examples

This example shows how to reset the spanning tree port instance priority:

Console> (enable) clear spantree portinstancepri 5/1 2

Port 5/1 instances 1-16 using portpri 32.

Console> (enable)

This example shows how to reset the spanning tree port priority for all MST instances:

Console> (enable) clear spantree portinstancepri 8/1 mst 0-15

Port 8/1 MST Instances 0-15 using portpri 32

Console> (enable)

Related Commands

set spantree portinstancepri
show spantree

clear spantree portpri

To clear the port priority of a port on the switch, use the clear spantree portpri command.

clear spantree portpri mod/port [mst]

Syntax Description

mod/port	Number of the module and the port on the module.
mst	(Optional) Resets the MST port priority.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear the spanning tree port priority:

Console> (enable) clear spantree portpri 3/1

Port 3/1 is using the cost 32.

Console> (enable)

This example shows how to clear the MST port priority:

Console> (enable) clear spantree portpri 8/1 mst

Port 8/1 is using the priority 32 in MST mode.

Console> (enable)

Related Commands

set spantree portpri
show spantree

clear spantree portvlancost

To restore the default path cost to a VLAN on a port, use the clear spantree portvlancost command.

clear spantree portvlancost mod/port [vlans]

Syntax Description

mod/port	Number of the module and the port on the module.
vlans	(Optional) Number of the VLAN; valid values are from 1 to 4094.

Defaults

The default path cost is based on port speed; see Table 2-9 and Table 2-10 for default settings.

Table 2-9 Default Port Cost—Short Mode

Port Speed	Default Port Cost
4 Mb	250
10 Mb	100
16 Mb	62
100 Mb	19
155 Mb	14
1 Gb	4
10 Gb	2

Table 2-10 Default Port Cost—Long Mode

Port Speed	Default Port Cost
100 Kb	200,000,000
1 Mb	20,000,000
10 Mb	2,000,000
100 Mb	200,000
1 Gb	20,000
10 Gb	2,000
100 Gb	200
1 Tb	20
10 Tb	2

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is valid in PVST+ mode only.

If you do not specify a VLAN, all VLANs are cleared.

Examples

These examples show how to restore the default path cost to a VLAN on a port:

Console> (enable) clear spantree portvlancost 2/10 1-10

Port 2/10 VLANs 11-21 have path cost 6

Port 2/10 VLANs 1-10,22-1000 have path cost 10.

Console> (enable)

Console> (enable) clear spantree portvlancost 2/10

Port 2/10 VLANs 1-1000 have path cost 10.

Console> (enable)

Related Commands

set spantree portvlancost
show spantree statistics

clear spantree portvlanpri

To reset the spanning tree port VLAN priority, use the clear spantree portvlanpri command.

clear spantree portvlanpri mod/port [vlans]

Syntax Description

mod/port	Number of the module and the port on the module.
vlans	(Optional) Number of the VLAN; valid values are from 1 to 4094.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to reset the spanning tree port VLAN priority:

Console> (enable) clear spantree portvlanpri 1/2 23-40

Port 1/2 vlans 3,6-20,23-1000 using portpri 32

Port 1/2 vlans 1-2,4-5,21-22 using portpri 30

Console> (enable)

Related Commands

set spantree portvlanpri
show spantree

clear spantree root

To restore the spanning tree bridge priority, hello time, maxage, and forward delay on the switch to their default values, use the clear spantree root command.

clear spantree root [vlans]

clear spantree root mistp-instance instances

clear spantree root mst instances

Syntax Description

vlans	(Optional) Number of the VLAN; valid values are from 1 to 4094.
mistp-instance instances	Specifies the instance number; valid values are from 1 to 16.
mst instances	Specifies the MST instance number; valid values are 0 to 15.

Defaults

The defaults are as follows:

•switch priority is 32768

•forward delay is 15 seconds

•hello time is 2 seconds

•maxage is 20 seconds

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear the spanning tree root on a range of VLANs:

Console> (enable) clear spantree root 1-20 

VLANs 1-20 bridge priority set to 32678.

VLANs 1-20 bridge hello time set to 2 seconds.

VLANs 1-20 bridge max aging time set to 20 seconds.

VLANs 1-20 bridge forward delay set to 15 seconds.

This example shows how to clear the spanning tree root on two specific VLANs:

Console> (enable) clear spantree root 22,24

VLANs 22,24 bridge priority set to 32678.

VLANs 22,24 bridge hello time set to 2 seconds.

VLANs 22,24 bridge max aging time set to 20 seconds.

VLANs 22,24 bridge forward delay set to 15 seconds.

Console> (enable)

This example shows how to clear the spanning tree root on an instance:

Console> (enable) clear spantree root mistp-instance 1

Instance 1 bridge priority set to 32768.

Instance 1 bridge max aging time set to 20.

Instance 1 bridge hello time set to 2.

Instance 1 bridge forward delay set to 15.

Console> (enable)

This example shows how to clear the spanning tree root on an MST instance:

Console> (enable) clear spantree root mst 0 

MST Instance s 0 bridge priority set to 32768. 

Instances 0 bridge max aging time set to 20. 

Instances 0 bridge hello time set to 2. 

Instances 0 bridge forward delay set to 15. 

Console> (enable)

Related Commands

set spantree root
show spantree

clear spantree statistics

To clear the spanning tree statistics, use the clear spantree statistics command.

clear spantree statistics mod/port

clear spantree statistics vlans

clear spantree statistics mistp-instance instances

clear spantree statistics mst instances

clear spantree statistics bpdu

Syntax Description

mod/port	Number of the module and the port on the module.
vlans	(Optional) Number of the VLAN; valid values are from 1 to 4094.
mistp-instance instances	Specifies the instance number; valid values are from 1 to 16.
mst instances	Specifies the MST instance number; valid values are from 0 to 15.
bpdu	Clears the spanning tree BPDU counters. See the "Usage Guidelines" section for more information.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

When you enter the clear spantree statistics bpdu command, the counters for transmitted, received, processed, and dropped BPDUs and the rate of these BPDUs are cleared.

Examples

This example shows how to clear the spanning tree statistics for VLAN 1:

Console> (enable) clear spantree statistics 1

Cleared all VLAN counters for VLAN 1

Statistics cleared for vlans 1

Console> (enable)

This example shows how to clear the spanning tree statistics for a port:

Console> (enable) clear spantree statistics 3/1

Statistics cleared for module 3/1

Console> (enable)

This example shows how to clear the spanning tree statistics for an instance:

Console> (enable) clear spantree statistics mistp-instance 2

Statistics cleared for instances 2

Console> (enable)

This example shows how to clear the spanning tree statistics for an MST instance:

Console> (enable) clear spantree statistics mst 0

Statistics cleared for MST instance: 0

Console> (enable)

This example shows how to clear the counter statistics for spanning tree BPDUs:

Console> (enable) clear spantree statistics bpdu

Spanning tree BPDU statistics cleared on the switch.

Console> (enable)

Related Commands

show spantree statistics

clear spantree uplinkfast

To turn off the UplinkFast feature and to return the switch priority and port costs to the default settings, use the clear spantree uplinkfast command.

clear spantree uplinkfast

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

In some situations, when you use this command, load balancing on the switch might be lost.

Examples

This example shows how to turn off the UplinkFast feature and to return the switch priority to the default settings:

Console> (enable) clear spantree uplinkfast

This command will cause all portcosts, portvlancosts, and the 

bridge priority on all vlans to be set to default.

Do you want to continue (y/n) [n]? y

VLANs 1-1005 bridge priority set to 32768.

The port cost of all bridge ports set to default value.

The portvlancost of all bridge ports set to default value.

uplinkfast disabled for bridge.

Console> (enable)

Related Commands

set spantree uplinkfast
show spantree uplinkfast

clear ssh mode

To clear the Secure Shell (SSH) version and return to compatibility mode, use the clear ssh mode command.

clear ssh mode

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

You can return to compatibility mode after operating in SSH version 1 or version 2 mode by entering the clear ssh mode command. In compatility mode, both SSH version 1 connections and version 2 connetions are supported.

Examples

This example shows how to clear the SSH version and return to compatibility mode:

Console> (enable) clear ssh mode

SSH server mode set to V1 and V2

Console> (enable)

Related Commands

set ssh mode
show ssh

clear system info-log command

To remove a show command from the system information logging index, use the clear system info-log command command.

clear system info-log command {all | index_number}

Syntax Description

all	Removes all show commands from the system information logging index.
index_number	Removes a specific show command entry from the system information logging index; valid values are from 1 to 15.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

To display the index numbers of the show commands in the system information logging index, enter the show system info-log command.

Examples

This example shows how to remove the second show command from the system information logging index:

Console> (enable) clear system info-log command 2

Successfully cleared the configured command.

Console> (enable)

This example shows how to remove all show commands from the system information logging index:

Console> (enable) clear system info-log command all

Successfully cleared all the system commands configured.

Console> (enable)

Related Commands

clear config
set system info-log
show system info-log

clear system profile

To clear the system profile configuration, use the clear system profile command.

clear system profile

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear the system profile configuration:

Console> (enable) clear system profile

Profile configuration is clear for the system.

Console> (enable)

Related Commands

clear config
set system profile
show system profile

clear tacacs key

To remove the key setting used for TACACS+ authentication and encryption, use the clear tacacs key command.

clear tacacs key

Syntax Description

This command has no arguments or keywords.

Defaults

The default key value is null.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear the key setting used for authentication and encryption:

Console> (enable) clear tacacs key

TACACS server key cleared.

Console> (enable) 

Related Commands

set tacacs key
show tacacs

clear tacacs server

To remove a host from the list of TACACS+ servers, use the clear tacacs server command.

clear tacacs server ip_addr

Syntax Description

ip_addr

IP address of the server to be removed from the list of TACACS+ servers.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to remove a server from the list of TACACS+ servers:

Console> (enable) clear tacacs server 170.1.2.20

170.1.2.20 cleared from TACACS table

Console> (enable)

Related Commands

show tacacs

clear timezone

To return the time zone to its default, UTC, use the clear timezone command.

clear timezone

Syntax Description

This command has no arguments or keywords.

Defaults

The default time zone is UTC.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The clear timezone command functions only when NTP is running. If you set the time manually and NTP is disengaged, the clear timezone command has no effect.

Examples

This example shows how to clear the time zone:

Console> (enable) clear timezone

Timezone name and offset cleared.

Console> (enable)

Related Commands

set timezone

clear top

To stop the TopN process, use the clear top command.

clear top {all | report_num}

Syntax Description

all	Stops all nonpending TopN results.
report_num	TopN report number to kill; valid values are from 1 to 5.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The clear top all command will not kill any pending TopN reports. Only the reports with a done status are killed.

You can terminate TopN processes without the background option (use the show top background command to find out if the background option is used) by pressing Ctrl-C in the same Telnet or console session or by entering the clear top [report_num] command from a separate Telnet or console session. The prompt is not printed before the TopN report is completely displayed. Other commands will be blocked until the report has been displayed.

Examples

This example shows how to stop the TopN 1 process from a console session:

Console> (enable) clear top 1

10/29/1998,12:05:38:MGMT-5: TopN report 1 killed by Console//.

Console> (enable)

This example shows how to stop the TopN 4 process from a Telnet session:

Console> (enable) clear top 4 

10/29/1998,12:06:00:MGMT-5: TopN report 4 killed by telnet/172.22.34.2/.

Console> (enable)

Related Commands

show top
show top report

clear trunk

To restore a trunk port to its default trunk type and mode or to clear specific VLANs from the allowed VLAN list for a trunk port, use the clear trunk command.

clear trunk mod/port [vlans]

Syntax Description

mod/port	Number of the module and the port on the module.
vlans	(Optional) Number of the VLAN to remove from the allowed VLAN list; valid values are from 1 to 4094.

Defaults

For all ports except Multilayer Switch Module (MSM) ports, the default is auto negotiate. For MSM ports, the default is off negotiate mode.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you specify VLANs, those VLANs are removed from the list of VLANs allowed on the trunk. Default VLANs cannot be cleared on the trunk.

Traffic for the removed VLANs are not forwarded over a trunk port. To add VLANs that you have removed, use the set trunk mod/port vlans command.

If you are trying to clear extended-range VLANs and sufficient space in NVRAM is not available, a warning message displays and the command fails.

Examples

This example shows how to clear VLANs 200 through 500 from the  trunk port on port 2 of module 1:

Console> (enable) clear trunk 1/2 200-500

Removing Vlan(s) 200-500 from allowed list.

Port 1/2 allowed vlans modified to 1-199,501-1000.

Console> (enable)

This example shows the output if you attempt to clear a trunk when not enough NVRAM space is available:

Console> (enable) clear trunk 2/18 1030-1999

Failed to clear extended range vlans from allowed list.

Not enough NVRAM space. Use the `set trunk' command to restore 

       some existing entries to the default value.

Console> (enable) 

Related Commands

set trunk
show trunk

clear vlan

To delete an existing VLAN from a management domain or to clear VLANs that are secured by a Firewall Services Module, use the clear vlan command.

clear vlan vlans

clear vlan {vlans} firewall-vlan {mod}

Syntax Description

vlans	Number of the VLAN; valid values are from 1 to 4094.
firewall-vlan	Clears VLANs that are secured by a Firewall Services Module.
mod	Number of the module.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Follow these guidelines for deleting VLANs:

•When you delete a normal-range Ethernet VLAN in VTP server mode, the VLAN is removed from all switches in the same VTP domain.

•When you delete a normal-range VLAN in VTP transparent mode, the VLAN is deleted only on the current switch.

•You can delete an extended-range VLAN only on the switch where it was created.

When you clear a VLAN, all ports assigned to that VLAN become inactive. However, the VLAN port assignments are retained until you move the ports to another VLAN. If the cleared VLAN is reactivated, all ports that are still configured on that VLAN are also reactivated. A warning is displayed if you clear a VLAN that exists in the mapping table.

When you clear a private VLAN (primary, isolated, or community), the ports are set to inactive and are not assigned to any VLAN. The private VLAN mappings for the selected VLAN are also cleared. ACL to VLAN mappings are also deleted.

Examples

This example shows how to clear existing VLAN 4000 from a management domain:

Console> (enable) clear vlan 4000 
This command will de-activate all ports on vlan 4 
in the entire management domain 
Do you want to continue(y/n) [n]? y 
VLAN 4 deleted

Console> (enable) 

Related Commands

set vlan
show vlan

clear vlan counters

To return the software-cached counters to 0 for all VLANs, use the clear vlan counters command.

clear vlan counters {vlans | all}

Syntax Description

vlans	Number of the VLAN or range of VLANs; valid values are from 1 to 4094.
all	Clears counters for all VLANs.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear counters for VLAN 1005:

Console> (enable) clear vlan counters 1005

This command will reset vlan couters for vlan 1005

Do you want to continue (y/n) [n]?y

Console> (enable)

Related Commands

show vlan counters

clear vlan mapping

To delete existing IEEE 802.1Q VLAN-to-ISL VLAN mappings or reserved-to-nonreserved VLAN mapping, use the clear vlan mapping command.

clear vlan mapping dot1q {dot1q_vlan | all}

clear vlan mapping reserved {reserved_vlan | all}

Syntax Description

dot1q dot1q_vlan	Clears the IEEE 802.1Q VLAN-to-ISL VLAN mapping.
dot1q all	Clears all IEEE 802.1Q VLAN-to-ISL VLAN mappings.
reserved reserved_vlan	Clears the specified reserved-to-nonreserved VLAN mapping.
reserved all	Clears all reserved-to-nonreserved VLAN mappings.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

When you clear a VLAN, all ports assigned to that VLAN become inactive. However, the VLAN port assignments are retained until you move the ports to another VLAN. If the cleared VLAN is reactivated, all ports that are still configured on that VLAN are also reactivated.

Examples

This example shows how to clear an existing mapped VLAN from the dot1q mapping table:

Console> (enable) clear vlan mapping dot1q 444

Vlan Mapping 444 Deleted.

Console> (enable) 

This example shows how to clear all mapped VLANs from the mapping table:

Console> (enable) clear vlan mapping dot1q all

All Vlan Mapping Deleted.

Console> (enable) 

This example shows how to clear mapped reserved VLANs from the mapping table:

Console> (enable) clear vlan mapping reserved 1007

Vlan Mapping 1007 Deleted.

Console> (enable) 

Related Commands

set vlan
show vlan

clear vmps rcp

To delete the VMPS rcp username from the VMPS server table, use the clear vmps rcp command.

clear vmps rcp username

Syntax Description

username

Username up to 14 characters long.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you do not enter a username, all rcp usernames are deleted.

Examples

This example shows how to clear a specific VMPS rcp username from the VMPS table:

Console> (enable) clear vmps rcp jdoe

Console> (enable)

Related Commands

set rcp username

clear vmps server

To delete a VMPS server from the VMPS server table, use the clear vmps server command.

clear vmps server ip_addr

Syntax Description

ip_addr

IP address or host name of the VMPS server to be deleted.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear a VMPS server from the VMPS table:

Console> (enable) clear vmps server 192.168.255.255

VMPS domain server 192.168.255.255 cleared from VMPS table.

Console> (enable)

This example shows the results of trying to clear a nonexistent VMPS server from the VMPS table:

Console> (enable) clear vmps server 192.168.255.255

VMPS domain server 192.168.255.255 not in VMPS table.

Console> (enable)

Related Commands

reconfirm vmps
set vmps server

clear vmps statistics

To delete existing VMPS statistics, use the clear vmps statistics command.

clear vmps statistics

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to delete existing VMPS statistics:

Console> (enable) clear vmps statistics

VMPS and dynamic vlan statistics cleared.

Console> (enable)

Related Commands

show vmps statistics

clear vtp pruneeligible

To specify which VLANs in the VTP domain are ineligible for pruning, use the clear vtp pruneeligible command.

clear vtp pruneeligible vlans...

Syntax Description

vlans...

Number of VLANs to make pruning ineligible; valid values are from 2 to 1000.

Defaults

The default is VLANs 2 through 1000 are eligible for pruning.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

VTP pruning causes information about each pruning-eligible VLAN to be removed from VTP updates if no stations belong to that VLAN out a particular switch port. Use the set vtp command to enable VTP pruning.

By default, VLANs 2 through 1000 are pruning eligible. Use the clear vtp pruneeligible command to make VLANs pruning ineligible.

If VLANs are pruning ineligible, use the set vtp pruneeligible command to make the VLANs pruning eligible again.

You can enter one or multiple VLANs. The following are examples of valid VLAN lists: 1; 1,2,3; 1-3,7; 2-215.

Examples

This example shows how to make VLANs 200 through 500 pruning ineligible:

Console> (enable) clear vtp pruneeligible 200-500

Vlans 1,200-500,1001-1005 will not be pruned on this device.

VTP domain Company modified.

Console> (enable)

Related Commands

set vtp
set vtp pruneeligible
show vtp domain

clear vtp statistics

To delete VTP statistics, use the clear vtp statistics command.

clear vtp statistics

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to clear VTP statistics:

Console> (enable) clear vtp statistics

vtp statistics cleared.

Console> (enable)

Related Commands

set vtp
show vtp statistics