Clearing Security Associations

You can set up the router software to clear IKE SAs automatically when the corresponding services PIC restarts or is taken offline. To configure this property, include the clear-ike-sas-on-pic-restart statement at the [edit services ipsec-vpn] hierarchy level:

After you add this statement to the configuration, all the IKE SAs corresponding to the tunnels in the PIC will be cleared when the PIC restarts or goes offline.