Reset Ike Sa - HPE FlexNetwork HSR6800 Security Command Reference

Parameters
name: Specifies the name of the peer security gateway for IKE negotiation, a string of 1 to 32
characters.
Usage guidelines
If you configure the id-type name or id-type user-fqdn command on the initiator, the IKE
negotiation initiator sends its security gateway name as its ID for IKE negotiation, and the peer uses
the security gateway name configured with the remote-name command to authenticate the initiator.
Make sure the local gateway name matches the remote gateway name configured on the peer.
Related commands
•
id-type
•
local-name
•
ike local-name
Examples
# Configure the remote security gateway name as apple for IKE peer peer1.
<Sysname> system-view
[Sysname] ike peer peer1
[Sysname-ike-peer-peer1] remote-name apple

reset ike sa

Use reset ike sa to clear IKE SAs.
Syntax
reset ike sa [ connection-id ]
Views
User view
Default command level
2: System level
Parameters
connection-id: Specifies the connection ID of the IKE SA to be cleared, in the range of 1 to
2000000000.
Usage guidelines
If you do not specify a connection ID, the command clears all ISAKMP SAs.
When you clear a local IPsec SA, its ISAKMP SA can transmit the Delete message to notify the
remote end to delete the paired IPsec SA. If the ISAKMP SA has been cleared, the local end cannot
notify the remote end to clear the paired IPsec SA, and you must manually clear the remote IPsec
SA.
Examples
# Clear the IKE SA that uses connection ID 2.
<Sysname> display ike sa
total phase-1 SAs:
connection-id
----------------------------------------------------------
1
2
1
peer flag
202.38.0.2 RD|ST
202.38.0.2 RD|ST
326
phase doi
1 IPSEC
2 IPSEC