Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

clear security ipsec security-associations

Syntax

Description

Clear information about IPsec security associations (SAs).

Options

  • none—Clear all IPsec SAs.

  • family—(Optional) Clear SAs by family.

    • inet—IPv4 address family.

    • inet6—IPv6 address family.

  • fpc slot-number —Specific to SRX Series devices. Clear information about existing IPsec SAs in this Flexible PIC Concentrator (FPC) slot.

  • index SA-index-number —(Optional) Clear the IPsec SA with this index number.

  • kmd-instance—Specific to SRX Series devices. Clear information about existing IPsec SAs in the key management process (the daemon, which in this case is KMD) identified by FPC slot-number and PIC slot-number .

    • all—All KMD instances running on the Services Processing Unit (SPU).

    • kmd-instance-name—Name of the KMD instance running on the SPU.

  • pic slot-number —Specific to SRX Series devices. Clear information about existing IPsec SAs in this PIC slot.

  • ha-link-encryption—(Optional) Clear information about IPsec SAs for interchassis link tunnel only. See ipsec (High Availability). When you enable High Availability feature, you cannot delete customer tunnels on the backup node.

Required Privilege Level

clear

Output Fields

This command produces no output.

Release Information

Command introduced in Junos OS Release 8.5. The fpc, pic, and kmd-instance options added in Junos OS Release 9.3. The family option added in Junos OS Release 11.1.

Support for the ha-link-encryption option added in Junos OS Release 20.4R1.