VPN Tunnel Management

[HarrisRebar]

I would love to see an easy way to enable and disable ipsec tunnels and / or individual proxy ID's within the ipsec tunnel in order to force the tunnel to renegotiate via the GUI interface.  Why does such a basic function not exist on the PA in the gui?

-Dan

[iguarino]

If you have access to the CLI, I believe the following commands will do the same thing:

clear vpn ipsec-sa tunnel <value>

clear vpn ike-sa gateway <value>

Ian

[ericgearhart]

Just for the sake of searching the forums and finding this thread in the future, I think this is the equivalent to Cisco's ASA commands:

clear crypto isakmp sa (or 'clear cry isa sa')

clear crypto ipsec sa