topic Re: Bring down IPsec tunnel manually in General Topics

topic Re: Bring down IPsec tunnel manually in General Topics https://live.paloaltonetworks.com/t5/general-topics/bring-down-ipsec-tunnel-manually/m-p/533001#M109834 <P>Hi <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/229126">@j.nepomuceno</a> ,</P> <P> </P> <P>The clear (bounce) commands are found here -> <A href="https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/vpns/set-up-site-to-site-vpn/enabledisable-refresh-or-restart-an-ike-gateway-or-ipsec-tunnel/refresh-or-restart-an-ike-gateway-or-ipsec-tunnel" target="_blank" rel="noopener">https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/vpns/set-up-site-to-site-vpn/enabledisable-refresh-or-restart-an-ike-gateway-or-ipsec-tunnel/refresh-or-restart-an-ike-gateway-or-ipsec-tunnel</A> and on the bottom of this doc -> <A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVGCA0" target="_blank" rel="noopener">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVGCA0</A>.</P> <P> </P> <P>The disable commands are found here -> <A href="https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/vpns/set-up-site-to-site-vpn/enabledisable-refresh-or-restart-an-ike-gateway-or-ipsec-tunnel/enable-or-disable-an-ike-gateway-or-ipsec-tunnel" target="_blank" rel="noopener">https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/vpns/set-up-site-to-site-vpn/enabledisable-refresh-or-restart-an-ike-gateway-or-ipsec-tunnel/enable-or-disable-an-ike-gateway-or-ipsec-tunnel</A>.</P> <P> </P> <P>This doc is also useful -> <A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClivCAC" target="_blank">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClivCAC</A>.</P> <P> </P> <P>Thanks,</P> <P> </P> <P>Tom</P> Thu, 02 Mar 2023 17:47:13 GMT TomYoung 2023-03-02T17:47:13Z Bring down IPsec tunnel manually https://live.paloaltonetworks.com/t5/general-topics/bring-down-ipsec-tunnel-manually/m-p/532958#M109819 <P>I am troubleshooting an issue where I need to bring down the IPsec tunnel manually, what is the best way to do this in GUI or CLI?<BR /><BR />Thanks</P> Thu, 02 Mar 2023 14:36:28 GMT https://live.paloaltonetworks.com/t5/general-topics/bring-down-ipsec-tunnel-manually/m-p/532958#M109819 j.nepomuceno 2023-03-02T14:36:28Z Re: Bring down IPsec tunnel manually https://live.paloaltonetworks.com/t5/general-topics/bring-down-ipsec-tunnel-manually/m-p/532971#M109826 <P>Hi <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/229126">@j.nepomuceno</a> ,</P> <P> </P> <P>Do you want to (1) bounce the tunnel or (2) manually disable it?</P> <P> </P> <P>Thanks,</P> <P> </P> <P>Tom</P> Thu, 02 Mar 2023 15:43:36 GMT https://live.paloaltonetworks.com/t5/general-topics/bring-down-ipsec-tunnel-manually/m-p/532971#M109826 TomYoung 2023-03-02T15:43:36Z Re: Bring down IPsec tunnel manually https://live.paloaltonetworks.com/t5/general-topics/bring-down-ipsec-tunnel-manually/m-p/532995#M109832 <P>I can try both. Thanks</P> Thu, 02 Mar 2023 17:15:47 GMT https://live.paloaltonetworks.com/t5/general-topics/bring-down-ipsec-tunnel-manually/m-p/532995#M109832 j.nepomuceno 2023-03-02T17:15:47Z Re: Bring down IPsec tunnel manually https://live.paloaltonetworks.com/t5/general-topics/bring-down-ipsec-tunnel-manually/m-p/532997#M109833 <P>Phase 1</P> <P>clear vpn ike-sa gateway <EM>GATEWAYNAME</EM></P> <P> </P> <P>Phase 2</P> <P>clear vpn ipsec-sa tunnel <EM>TUNNELNAME</EM></P> <P> </P> Thu, 02 Mar 2023 17:34:51 GMT https://live.paloaltonetworks.com/t5/general-topics/bring-down-ipsec-tunnel-manually/m-p/532997#M109833 Raido_Rattameister 2023-03-02T17:34:51Z Re: Bring down IPsec tunnel manually https://live.paloaltonetworks.com/t5/general-topics/bring-down-ipsec-tunnel-manually/m-p/533001#M109834 <P>Hi <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/229126">@j.nepomuceno</a> ,</P> <P> </P> <P>The clear (bounce) commands are found here -> <A href="https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/vpns/set-up-site-to-site-vpn/enabledisable-refresh-or-restart-an-ike-gateway-or-ipsec-tunnel/refresh-or-restart-an-ike-gateway-or-ipsec-tunnel" target="_blank" rel="noopener">https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/vpns/set-up-site-to-site-vpn/enabledisable-refresh-or-restart-an-ike-gateway-or-ipsec-tunnel/refresh-or-restart-an-ike-gateway-or-ipsec-tunnel</A> and on the bottom of this doc -> <A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVGCA0" target="_blank" rel="noopener">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVGCA0</A>.</P> <P> </P> <P>The disable commands are found here -> <A href="https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/vpns/set-up-site-to-site-vpn/enabledisable-refresh-or-restart-an-ike-gateway-or-ipsec-tunnel/enable-or-disable-an-ike-gateway-or-ipsec-tunnel" target="_blank" rel="noopener">https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/vpns/set-up-site-to-site-vpn/enabledisable-refresh-or-restart-an-ike-gateway-or-ipsec-tunnel/enable-or-disable-an-ike-gateway-or-ipsec-tunnel</A>.</P> <P> </P> <P>This doc is also useful -> <A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClivCAC" target="_blank">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClivCAC</A>.</P> <P> </P> <P>Thanks,</P> <P> </P> <P>Tom</P> Thu, 02 Mar 2023 17:47:13 GMT https://live.paloaltonetworks.com/t5/general-topics/bring-down-ipsec-tunnel-manually/m-p/533001#M109834 TomYoung 2023-03-02T17:47:13Z