ADTRAN AOS Version R10.1.0 Command Reference Manual page 107

Command Reference Guide
clear crypto ipsec sa
Use the clear crypto ipsec sa command to clear existing Internet Protocol security (IPsec) security
associations (SAs), including active ones. Variations of this command include the following:
clear crypto ipsec sa
clear crypto ipsec sa entry <ip address> ah <SPI>
clear crypto ipsec sa entry <ip address> esp <SPI>
clear crypto ipsec sa map <name>
clear crypto ipsec sa peak
clear crypto ipsec sa peer <ip address>
clear crypto ipsec sa remote-id <remote-id>
Syntax Description
entry <ip address>
ah <SPI>
esp <SPI>
map <name>
peak
peer <ip address>
remote-id <remote-id>
Default Values
No default values are necessary for this command.
Command History
Release 4.1
Release 15.1
Release 17.5
60000CRG0-35E
Optional. Clears only the SAs related to the specified destination IP
address. IP addresses should be expressed in dotted decimal notation (for
example, 10.10.10.1).
Optional. Clears only a portion of the SAs by specifying the Authentication
Header (AH) Protocol and a security parameter index (SPI). You can
determine the correct SPI value using the show crypto ipsec sa
command.
Optional. Clears only a portion of the SAs by specifying the Encapsulating
Security Payload (ESP) Protocol and an SPI. You can determine the correct
SPI value using the show crypto ipsec sa command.
Optional. Clears only the SAs associated with the specified crypto map.
Optional. Clears the peak IPsec SA count reached.
Optional. Clears only the SAs associated with the specified far-end IP
address. IP addresses should be expressed in dotted decimal notation (for
example, 10.10.10.1).
Optional. Removes all IPsec SAs associated with the specified IPsec remote
ID.
Command was introduced.
Command was expanded to include the remote-id parameter.
Command was expanded to include the peak parameter.
Copyright © 2012 ADTRAN, Inc.
Enable Mode Command Set
107