You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

Back to Table of Contents

Back to CLI Configure Mode

Back to Address Context - CLI

Back to IPSec Security - CLI

Use this command to delete IKE Security Associations (SAs).

Command Syntax

% request addressContext <addressContext_name> ipsec 
   ikeSaDelete saIndex <SA index>
   ikeSaDeleteAll
   ipsecSaDelete localSPI

Command Parameters

IPSec SA Delete Parameters

Parameter

Length/Range

Description

ikeSaDelete <SA_index>

N/A

Enter SA index to delete a specific IKE SA and its IPSEC SAs.

ikeSaDeleteAll

N/A

Use this parameter to delete ALL IKE and IPSEC SAs.

  • For IKEv1, this is an ungraceful delete message (peer is not notified).
  • For IKEv2, a tear-down message is sent to the peer.

ipsecSaDelete localSPI <local_SPI>

N/A

Enter local SPI to delete the IPsec SA pair (local_SPI: incoming Security Parameter Index value).

 

  • No labels