Since I didn't see anyone providing a solution i just chose "disable" for each tunnel in the GUI and then did a commit.
The 3 tunnels went RED for status but IKE is still green which makes no sense.
It seems there should be a simple CLI command like "test vpn tunnel tunnelname" (stop/start disable/enable) to do this easily but nobody suggested one so i assume one does not exist.
I have 2 customers we have stopped supporting so I wanted to disable the tunnels.
If they resume support/buy new products then I will just enable it instead of going through the whole tunnel building process.
... View more