3Com 3C13618 Command Reference Manual page 729

policy-name: Specify the name of an IPSec policy template. The naming rule is: the
length is 1 to 15 characters, case sensitive, the character can be English letter or
figure.
sequence-number: Specify the sequence number of IPSec policy. If no
sequence-number is specified, the IPSec will be all the IPSec policies in the IPSec
policy template named policy-name.
parameters: Deleting the unique SA defined by the destination address, protocol,
and SPI.
dest-address: Specifying the destination IP address in the format: A.B.C.D.
protocol: Specifying the protocol by inputting the key word ah or esp, case
insensitive.
spi: Specifying the security parameter index (SPI), ranging 256 to 4294967295.
Description
Using the reset ipsec sa command, you can cancel the SA (security ally).
This command is applicable to the IPSec module of the operating system.
This command is used to cancel a SA already set up (manually or through IKE
negotiation).
If a packet re-triggers IKE negotiation after an SA set up through IKE negotiation is
deleted, IKE will reestablish an SA through negotiation.
If an SA set up manually is deleted, the system will set up a new SA according to the
parameter manually set up. To prevent the system from setting up a new SA, you can
delete some parameters manually set in the map in manual mode. (If the parameters
set in IPSec policy are not complete, the SA manually set will not be created.)
For related commands, see display ipsec sa.
Example
# Cancel all the SAs.
[3Com]reset ipsec sa all
# Cancel an SA whose remote IP address is 10.1.1.2.
[3Com]reset ipsec sa remote 10.1.1.2
# Cancel the SAs in policy1.
[3Com]reset ipsec sa policy policy1
# Cancel an SA whose remote IP address is 10.1.1.2, security protocol is AH, and
SPI is 10000
Security
79