reset ike sa

Use reset ike sa to delete IKE SAs.

Syntax

reset ike sa [ connection-id connection-id ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

connection-id connection-id: Specifies the connection ID of the IKE SA to be cleared, in the range of 1 to 2000000000.

Usage guidelines

When you delete an IKE SA, the device automatically sends a notification to the peer.

Examples

# Display the current IKE SAs.

<Sysname> display ike sa
    Total IKE SAs:  2
    Connection-ID  Remote            Flag        DOI
  ----------------------------------------------------------
      1            202.38.0.2        RD          IPsec
      2            202.38.0.3        RD          IPsec
Flags:
RD--READY RL--REPLACED FD-FADING RK-REKEY

# Delete the IKE SA with the connection ID 2.

<Sysname> reset ike sa connection-id 2

# Display the current IKE SAs.

<Sysname> display ike sa

Total IKE SAs:  1
    Connection-ID  Remote            Flag        DOI
  ----------------------------------------------------------
      1            202.38.0.2        RD          IPsec
Flags:
RD--READY RL--REPLACED FD-FADING RK-REKEY