vpn question

[Ibrahim Jamil]

Hi Folks

I Have Two L2L Tunnels terminated on asa 5510, how can reset just one of these two

is it possible to reset the whole vpn on ur asa 5510 without restart the whole firewall

thanks

[Marcin Latosiewicz]

Ibrahim,

You can clear IPsec SAs ...

bsns-asa5505-19# clear crypto ipsec sa  peer ?

  Hostname or A.B.C.D     IPsec SA peer address or hostname
  Hostname or X:X:X:X::X  IPsec SA peer IPv6 address or hostname

or use vpn-sessiondb logoff

bsns-asa5505-19# vpn-sessiondb logoff ?

  all             All sessions
  anyconnect      AnyConnect sessions
  email-proxy     Email-Proxy sessions
  index           Index specific session
  ipaddress       IP Address specific sessions
  l2l             IPsec LAN-to-LAN sessions
  name            Username specific sessions
  protocol        Protocol specific sessions
  ra-ikev1-ipsec  IKEv1 IPsec Remote Access sessions
  tunnel-group    Tunnel-group sessions
  vpn-lb          VPN Load Balancing Mgmt sessions
  webvpn          WebVPN sessions

HTH,

Marcin

[Ibrahim Jamil]

thanks marcin