cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Community Helping Community

105
Views
10
Helpful
2
Replies

Difference between clear crypto sa and clear crypto session

Hello,

 

Can you please help me understand the difference between the commands:

clear crypto sa

&

clear crypto session

 

I understand that clear crypto sa will clear all SA's (phase 1 and phase 2) for a specific peer if you choose. I am understanding that clear crypto session will do that same thing. What is the difference?

2 REPLIES 2
VIP Advisor RJI VIP Advisor
VIP Advisor

Re: Difference between clear crypto sa and clear crypto session

Hi,
I assume you are referring to a Cisco IOS router rather than an ASA?

 

"clear crypto session" would clear IKEv1 (isakmp)/IKEv2 and IPSec SAs

"clear crypto sa" would clear only the IPSec SAs

 

To clear just IKEv1 (isakmp) or IKEv2 SAs, you can use the commands:- "clear crypto isakmp" or "clear crypto ikev2 sa"

 

HTH

Re: Difference between clear crypto sa and clear crypto session

Awesome thank you! That makes sense then. Yes, this would be on a router.
CreatePlease to create content
Content for Community-Ad
FusionCharts will render here