ADTRAN Stub Routing Specifikace stáhnout pdf (Strana 32)

100

101

Enable Mode Command Set Command Reference Guide

clear crypto ipsec sa

Use the clear crypto ipsec sa command to clear existing IPSec security associations (SAs), including

active ones.

Variations of this command include the following:

clear crypto ipsec sa

clear crypto ipsec sa entry <ip address> ah <SPI>

clear crypto ipsec sa entry <ip address> esp <SPI>

clear crypto ipsec sa map <map name>

clear crypto ipsec sa peer <ip address>

Syntax Description

entry

<ip address> Clear only the SAs related to a certain destination IP address.

<SPI> Clear only a portion of the SAs by specifying the AH (authentication header)

protocol and a security parameter index (SPI). You can determine the correct SPI

value using the

show crypto ipsec sa

command.

esp

<SPI> Clear only a portion of the SAs by specifying the ESP (encapsulating security

payload) protocol and a security parameter index (SPI). You can determine the

correct SPI value using the

show crypto ipsec sa

command.

map

<map name> Clear only the SAs associated with the crypto map name given.

peer

<ip address> Clear only the SAs associated with the far-end peer IP address given.

Default Values

No default value necessary for this command.

Command Modes

# Enable Command Mode

Command History

Release 4.1 Command was introduced

Usage Examples

The following example clears all IPSec SAs:

enable

clear crypto ipsec sa

The following example clears the IPSec SA used for ESP traffic with the SPI of 300 to IP address 192.168.1.1:

enable

clear crypto ipsec sa entry 192.168.1.1 esp 300

1 2 ... 27 28 29 30 31 32 33 34 35 36 37 ... 567 568

Komentáře k této Příručce

Žádné komentáře

ADTRAN Stub Routing Specifikace Strana 32

Komentáře k této Příručce

Související produkty a manuály pro Sítě ADTRAN Stub Routing