topic Re: VPN Tunnel Management in General Topics

VPN Tunnel Management

HarrisRebar — Wed, 01 May 2013 15:28:27 GMT

I would love to see an easy way to enable and disable ipsec tunnels and / or individual proxy ID's within the ipsec tunnel in order to force the tunnel to renegotiate via the GUI interface. Why does such a basic function not exist on the PA in the gui?

-Dan

Re: VPN Tunnel Management

iguarino — Wed, 01 May 2013 15:52:34 GMT

If you have access to the CLI, I believe the following commands will do the same thing:

clear vpn ipsec-sa tunnel <value>

clear vpn ike-sa gateway <value>

Ian

Re: VPN Tunnel Management

ericgearhart — Wed, 01 May 2013 17:09:26 GMT

Just for the sake of searching the forums and finding this thread in the future, I think this is the equivalent to Cisco's ASA commands:

clear crypto isakmp sa (or 'clear cry isa sa')

clear crypto ipsec sa