Which CLI command removes a misconfigured access list (ACL) from an interface? Exam Dumps 95/115

In ArubaOS-CX, an Access Control List (ACL) is applied to an interface using the ip access-group {in | out} command within the interface configuration context. To remove a misconfigured or no-longer-needed ACL from that interface, the standard negation command is used. The no prefix is added to the original application command, resulting in no ip access-group. This command unbinds the specified ACL from the interface without deleting the ACL definition itself, which can then be reapplied or modified as needed.

unset interface acl: This is not a valid command syntax in ArubaOS-CX for managing ACLs on an interface.

delete security rule: This command is syntactically incorrect. While no access-list deletes an ACL definition, this option does not correctly describe removing an ACL from an interface.

clear ip filter: clear commands are used for operational tasks like resetting counters or clearing dynamic entries, not for removing persistent configuration from a device.

---

1. ArubaOS-CX 10.12 Security Guide

Chapter: "Access Control Lists (ACLs)"

Section: "Applying an ACL to an interface". The guide explicitly states

"The no form of this command removes the application of the ACL from the interface." This directly supports the use of no ip access-group.

2. ArubaOS-CX 10.12 Command-Line Interface Guide

Part Number: 6300-8120a

Page 1311. Under the ip access-group command description for the interface context

the guide documents the no form (no ip access-group {in | out}) as the method to remove the application of the ACL from the interface.