Bring down IPsec tunnel manually

[j.nepomuceno]

I am troubleshooting an issue where I need to bring down the IPsec tunnel manually, what is the best way to do this in GUI or CLI?

Thanks

[TomYoung]

Hi @j.nepomuceno ,

Do you want to (1) bounce the tunnel or (2) manually disable it?

Thanks,

Tom

[j.nepomuceno]

I can try both. Thanks

[Raido_Rattameister]

Phase 1

clear vpn ike-sa gateway GATEWAYNAME

Phase 2

clear vpn ipsec-sa tunnel TUNNELNAME

[TomYoung · Accepted solution]

Hi @j.nepomuceno ,

The clear (bounce) commands are found here -> https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/vpns/set-up-site-to-site-vpn/enabledisable... and on the bottom of this doc -> https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVGCA0.

The disable commands are found here -> https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/vpns/set-up-site-to-site-vpn/enabledisable....

This doc is also useful -> https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClivCAC.

Thanks,

Tom