clear ipsec security-associations

Syntax

clear ipsec security-associations <sa-name>

Description

Clear information about the current IPSec security association. A new security association is then created. This command is valid for dynamic type security associations only.

Options

none—Clear all IPSec security associations.

sa-name—(Optional) Clear a particular security association.

Required Privilege Level

view

Sample Output: clear ipsec security-associations (detail)

user@host> show ipsec security-associations detail

Security association: sa-dynamic, Interface family: Up

  Direction: inbound, SPI: 242379418, State: Installed

  Mode: tunnel, Type: dynamic

  Protocol: ESP, Authentication: hmac-md5-96, Encryption: None

  Soft lifetime: Expires in 22979 seconds

  Hard lifetime: Expires in 28739 seconds

  Direction: outbound, SPI: 368592771, State: Installed

  Mode: tunnel, Type: dynamic

  Protocol: ESP, Authentication: hmac-md5-96, Encryption: None

  Soft lifetime: Expires in 22979 seconds

  Hard lifetime: Expires in 28739 seconds

user@host> clear ipsec security-associations

user@host> show ipsec security-associations detail

Security association: sa-dynamic, Interface family: Up

  Direction: inbound, SPI: 1031597683, State: Installed

  Mode: tunnel, Type: dynamic

  Protocol: ESP, Authentication: hmac-md5-96, Encryption: None

  Soft lifetime: Expires in 23037 seconds

  Hard lifetime: Expires in 28797 seconds

  Direction: outbound, SPI: 1618419878, State: Installed

  Mode: tunnel, Type: dynamic

  Protocol: ESP, Authentication: hmac-md5-96, Encryption: None

  Soft lifetime: Expires in 23037 seconds

  Hard lifetime: Expires in 28797 seconds