Clear VPN Tunnel phase1/phase2

[jcw009]

Is it possible to clear individual tunnels without bringing them all down? I've seen the clear crypt ips sa & cl crypt isa sa, but that's global. Is there something that I can do to pinpoint individual tunnels to kill?

Thanks!

[hdashnau · Accepted solution]

If its an ASA, you can also teardown specific tunnels using their index numbers.

To get the index number do "show vpn-sessiondb <(l2l,remote,svc,webvpn)>" command

To log it off do "vpn-sessiondb logoff index " command

-heather

[anthony.baker]

Hi mate,

You can do it by peer using:

clear crypto ipsec sa peer

Hope that helps!

Anthony

[jcw009]

Thats phase2, how about phase1?

[cameron.moody]

I'm not aware of a command that will let you specify for just phase 1 of a peer.

clear crypto session remote will reset phase 1 and 2 though