[pixos 6.2] clear crypto {ipsec or isakmp} commands

[Carlos A. Silva]

hi:

according to cisco docs, if i want to delete an active ipsec or isakmp sa, i can use the following commands:

'clear [crypto] ipsec sa...'

'clear [crypto] isakmp...'

when i type these commands my pix does not recognize them, nor are they listed in the pic 'help'.

can anyone help?

regards,

c.

[shannong]

You must be in config mode to use these "clear crypto" commands:

clear crypto ipsec sa

clear crypto isakmp sa

[Carlos A. Silva]

now there's no way to drop one single tunnel, i take it? via a command...

[shannong]

Yes... You can use:

clear [crypto] ipsec sa entry {destination-address} {protocol} {spi}