R3166-R3206-HP High-End Firewalls VPN Command Reference-6PW101

gateway name configured with the remote-name command to authenticate the initiator. Make sure the

local gateway name matches the remote gateway name configured on the peer.

Related commands: id-type, local-name, and ike local-name.

Examples

# Configure the remote security gateway name as apple for IKE peer peer1.

<Sysname> system-view

[Sysname] ike peer peer1

[Sysname-ike-peer-peer1] remote-name apple

reset ike sa

Syntax

reset ike sa [ connection-id ]

View

User view

Default level

2: System level

Parameters

connection-id: Connection ID of the IKE SA to be cleared, in the range 1 to 2000000000.

Description

Use the reset ike sa command to clear IKE SAs.

If you do not specify any parameter, the command clears all ISAKMP SAs.

When you clear a local IPsec SA, its ISAKMP SA can transmit the Delete message to notify the remote

end to delete the paired IPsec SA. If the ISAKMP SA has been cleared, the local end cannot notify the

remote end to clear the paired IPsec SA, and you must manually clear the remote IPsec SA.

Related commands: display ike sa.

Examples

# Clear the IKE SA that uses connection ID 2.

<Sysname> display ike sa

total phase-1 SAs: 1

connection-id peer flag phase doi

----------------------------------------------------------

1 202.38.0.2 RD|ST 1 IPSEC

2 202.38.0.2 RD|ST 2 IPSEC

flag meaning