HP FlexNetwork 10500 Series Security Configuration Manual page 369

Solution
1. Use the display ikev2 sa command to examine whether an IKEv2 SA exists on both ends. If
the IKEv2 SA on one end is lost, delete the IKEv2 SA on the other end by using the reset ikev2
sa command and trigger new negotiation. If an IKEv2 SA exists on both ends, go to the next
step.
2. Use the display ipsec sa command to examine whether IPsec SAs exist on both ends. If the
IPsec SAs on one end are lost, delete the IPsec SAs on the other end by using the reset ipsec
sa command and trigger new negotiation.
355