Reset Ike Sa - HP HSR6600 Command Reference Manual

Usage guidelines
If you configure the id-type name or id-type user-fqdn command on the initiator, the IKE negotiation
initiator sends its security gateway name as its ID for IKE negotiation, and the peer uses the security
gateway name configured with the remote-name command to authenticate the initiator. Make sure the
local gateway name matches the remote gateway name configured on the peer.
Related commands
id-type
•
• local-name
ike local-name
•
Examples
# Configure the remote security gateway name as apple for IKE peer peer1.
<Sysname> system-view
[Sysname] ike peer peer1
[Sysname-ike-peer-peer1] remote-name apple

reset ike sa

Use reset ike sa to clear IKE SAs.
Syntax
reset ike sa [ connection-id ]
Views
User view
Default command level
2: System level
Parameters
connection-id: Connection ID of the IKE SA to be cleared, in the range 1 to 2000000000.
Usage guidelines
If you do not specify a connection ID, the command clears all ISAKMP SAs.
When you clear a local IPsec SA, its ISAKMP SA can transmit the Delete message to notify the remote
end to delete the paired IPsec SA. If the ISAKMP SA has been cleared, the local end cannot notify the
remote end to clear the paired IPsec SA, and you must manually clear the remote IPsec SA.
Examples
# Clear the IKE SA that uses connection ID 2.
<Sysname> display ike sa
total phase-1 SAs:
connection-id
----------------------------------------------------------
1
2
flag meaning
RD--READY ST--STAYALIVE RL--REPLACED FD—FADING TO--TIMEOUT RK--REKEY
<Sysname> reset ike sa 2
1
peer flag
202.38.0.2 RD|ST
202.38.0.2 RD|ST
350
phase doi
1 IPSEC
2 IPSEC