Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


 

Use this command to delete IKE or IPsec Security Associations (SAs).

...

Code Block
languagenone
% request addressContext <addressContext_name> ipsec 
   ikeSaDelete saIndex <SA index>
   ikeSaDeleteAll
   ipsecSaDelete localSPI <local SPI>

Command Parameters

Caption
0Table
1IPsec/IKE SA Delete Parameters
3IPsec SA Delete Parameters


Parameter

Description

ikeSaDelete

<SA

_

index>


Enter the SA index to delete a specific IKE SA and its IPsec SAs.

ikeSaDeleteAll

Use this parameter to delete ALL IKE and IPsec SAs.

  • For IKEv1, this is an ungraceful delete message (peer is not notified).
  • For IKEv2, a tear-down message is sent to the peer.

ipsecSaDelete localSPI

<local

_

SPI>


Enter the local SPI to delete the IPsec SA pair (local_SPI: incoming Security Parameter Index value).

Pagebreak

...

Excerpt Include
_ipsecSaDelete_restriction
_ipsecSaDelete_restriction
nopaneltrue