About resetting ACE hit counters to zero

  • Using the clear statistics command, see Static ACL performance monitoring

  • Removing an ACL from an interface zeros the ACL's ACE counters for that interface only.

  • For a given ACL, either of the following actions clear the ACE counters to zero for all interfaces to which the ACL is assigned:
    • Adding or removing a permit or deny ACE in the ACL.

    • Rebooting the switch.

Resetting ACE hit counters to zero

The following example uses the counter activity to demonstrate using clear statistics to reset the counters to zero.

Switch# show statistics aclv6 V6-02 vlan 20 vlan-in

HitCounts for ACL V6-02

Total

(5)   10 permit icmp ::/0 fe80::20:2/128 128
(4)   20 permit icmp ::/0 fe80::20:3/128 128
(136) 30 permit tcp fe80::20:1/128 ::/0 eq 23
(2)   40 deny icmp ::/0 fe80::20:1/128 128
(10)  50 deny tcp ::/0 ::/0 eq 23
(8)   60 deny icmp ::/0 ::/0 133
(155) 70 permit ipv6 ::/0 ::/0

Switch# clear statistics aclv6 V6-02 vlan 20 <vlan-in|vlan-out>
Switch# show statistics aclv6 V6-02 vlan 20 <vlan-in|vlan-out>

HitCounts for ACL V6-02

Total
(0)   10 permit icmp ::/0 fe80::20:2/128 128
(0)   20 permit icmp ::/0 fe80::20:3/128 128
(0)   30 permit tcp fe80::20:1/128 ::/0 eq 23
(0)   40 deny icmp ::/0 fe80::20:1/128 128
(0)   50 deny tcp ::/0 ::/0 eq 23
(0)   60 deny icmp ::/0 ::/0 133
(0)   70 permit ipv6 ::/0 ::/0