Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

clear firewall

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
clear firewall (all | counter counter-name | filter filter-name | log (all | logical-system-name ) | logical-system logical-system-name)

Syntax (EX Series Switches)

content_copy zoom_out_map
clear firewall (all | counter counter-name | filter filter-name | log (all | logical-system-name) | policer counter (all | counter-id counter-index))

Syntax (QFX Series)

content_copy zoom_out_map
clear firewall (all | counter counter-name | filter filter-name

Description

Clear statistics about configured firewall filters.

When you clear the counters of a filter, this impacts not only the counters shown by the CLI, but also the ones tracked by SNMP2.

Subscriber management uses firewall filters to capture and report the volume-based service accounting counters that are used for subscriber billing. The clear firewall command also clears the service accounting counters that are reported to the RADIUS accounting server. For this reason, you must be cautious in specifying which firewall statistics you want to clear.

Note:

The clear firewall command cannot be used to clear the Routing Engine filter counters on a backup Routing Engine that is enabled for graceful Routing Engine switchover (GRES).

If you clear statistics for firewall filters that are applied to Trio-based DPCs and that also use the prefix-action action on matched packets, wait at least 5 seconds before you enter the show firewall prefix-action-stats command. A 5-second pause between issuing the clear firewall and show firewall prefix-action-stats commands avoids a possible timeout of the show firewall prefix-action-stats command.

Options

all

Clear the packet and byte counts for all filters. On EX Series switches, this option also clears the packet counts for all policer counters.

counter counter-name

Clear the packet and byte counts for a filter counter that has been configured with the counter firewall filter action.

filter filter-name

Clear the packet and byte counts for the specified firewall filter.

log (all | logical-system-name)

Clear log entries for IPv4 firewall filters that have then log as an action. Use log all to clear all log entries or log logical-system-name to clear log entries for the specified logical system.

logical-system logical-system-name

Clear the packet and byte counts for the specified logical system.

policer counter (all | counter-id counter-index)

(EX8200 switches only) Clear all policer counters using the policer counter all command, or clear a specific policer counter using the policer counter counter-id counter-index command. The value of counter-index can be 0, 1, or 2.

Required Privilege Level

clear

Sample Output

clear firewall all

content_copy zoom_out_map
user@host> clear firewall all   

clear firewall (counter counter-name)

content_copy zoom_out_map
user@host> clear firewall counter port-filter-counter

clear firewall (filter filter-name)

content_copy zoom_out_map
user@host> clear firewall filter ingress-port-filter

clear firewall (policer counter all) (EX8200 Switch)

content_copy zoom_out_map
user@switch> clear firewall policer counter all

clear firewall (policer counter counter-id counter-index) (EX8200 Switch)

content_copy zoom_out_map
user@switch> clear firewall policer counter counter-id 0

Release Information

Command introduced before Junos OS Release 7.4.

logical-system option introduced in Junos OS Release 9.3.

Command introduced in Junos OS Release 11.1.

log option introduced before Junos OS Release 11.4.

footer-navigation