Nominated Discussion: Bring down IPsec tunnel manually

kiwi — Tue, 05 Nov 2024 01:40:46 GMT

This Nominated Discussion Article is based on the post "Bring Down IPsec Tunnel Manually" by @j.nepomuceno and responded to by @TomYoung and @Raido_Rattameister . Read on to see the discussion and solution!

I am troubleshooting an issue where I need to bring down the IPsec tunnel manually, what is the best way to do this in GUI or CLI?

Thanks

Depending on whether you want to bounce the tunnel or actually disable it, you have different options.

The following CLI commands will tear down the VPN tunnel (phase1 & phase2 respectively):

Follow these steps to clear (bounce) a tunnel using the GUI:

Phase 1
- Goto Network > IPsec tunnels and select your tunnel
- Click IKE-Info
- At the bottom, click the action you want (Refresh or Restart)
Phase 2
- Goto Network > IPsec tunnels and select your tunnel
- Click Tunnel-Info
- At the bottom, click the action you want (Refresh or Restart)

Instead of bouncing, you can also choose to disable/enable IKE gateways or IPsec tunnels.

Enable/Disable an IKE Gateway
- Go to Network
  
  > Network Profiles > IKE Gateways and select the gateway in question.
- Click Enable/Disable at the bottom of the screen
Enable/Disable an IPsec tunnel
- Go to Network
  
  > IPSec Tunnels and select the tunnel in question
- Click Enable/Disable at the bottom of the screen

For more information:

article Nominated Discussion: Bring down IPsec tunnel manually in General Articles