To clear active IKE connections, use the clear crypto isakmp global configuration command.
clear crypto isakmp [connection-id]
connection-id (Optional) Specifies which connection to clear. If this argument is not used, all existing connections will be cleared.
If the connection-idargument is not used, all existing IKE connections will be cleared when this command is issued.
Global configuration
| Release | Modification | 11.3 T | This command was introduced. |
|---|
Use this command to clear active IKE connections.
This example clears an IKE connection between two peers connected by interfaces 172.21.114.123 and 172.21.114.67.
MyPeerRouter# show crypto isakmp sa
dst src state conn-id slot
172.21.114.123 172.21.114.67 QM_IDLE 1 0
155.0.0.2 155.0.0.1 QM_IDLE 8 0
MyPeerRouter# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
MyPeerRouter(config)# clear crypto isakmp 1
MyPeerRouter(config)# exit
MyPeerRouter# show crypto isakmp sa
dst src state conn-id slot
155.0.0.2 155.0.0.1 QM_IDLE 8 0
MyPeerRouter#| Command | Description |
|---|---|
| show crypto isakmp sa | Displays all current IKE SAs at a peer. |
Printed for apswan@ctr.ap.nic.in on Wed Mar 5 22:32:57 PST 2003
All material in this document copyright 2000 Cisco Systems, Inc. All rights reserved. No material may be reproduced or distributed without written permission of Cisco Systems, Inc.