Use this command to delete IKE or IPsec Security Associations (SAs).
...
Code Block |
---|
|
% request addressContext <addressContext_name> ipsec
ikeSaDelete saIndex <SA index>
ikeSaDeleteAll
ipsecSaDelete localSPI <local SPI> |
Command Parameters
Caption |
---|
0 | Table |
---|
1 | IPsec/IKE SA Delete Parameters |
---|
3 | IPsec SA Delete Parameters |
---|
|
Parameter | Description |
---|
ikeSaDelete
| <SA
| _ – Enter the SA index to delete a specific IKE SA and its IPsec SAs. | ikeSaDeleteAll
| Use this parameter to delete ALL IKE and IPsec SAs. - For IKEv1, this is an ungraceful delete message (peer is not notified).
- For IKEv2, a tear-down message is sent to the peer.
| ipsecSaDelete localSPI
| | _ – Enter the local SPI to delete the IPsec SA pair (local_SPI: incoming Security Parameter Index value). |
|
...
Excerpt Include |
---|
| _ipsecSaDelete_restriction |
---|
| _ipsecSaDelete_restriction |
---|
nopanel | true |
---|
|
|
|