Enable, Disable, Refresh, or Restart an IKE Gateway or IPSec Tunnel

Table of Contents

Where Can I Use This?	What Do I Need?
PAN-OS	No license required

You can enable, disable, refresh, or restart an IKE gateway or VPN tunnel to make troubleshooting easier.

Enable or Disable an IKE Gateway or IPSec Tunnel

Enable or disable an IKE gateway or IPSec tunnel to make troubleshooting easier.

Enable or disable an IKE gateway.
1. Select NetworkNetwork ProfilesIKE Gateways and select the gateway you want to enable or disable.
2. At the bottom of the screen, click Enable or Disable.
Enable or disable an IPSec tunnel.
1. Select NetworkIPSec Tunnels and select the tunnel you want to enable or disable.
2. At the bottom of the screen, click Enable or Disable.

You can refresh or restart an IKE gateway or IPSec tunnel. The refresh and restart behaviors for an IKE gateway and IPSec tunnel are as follows:

Phase	Refresh	Restart
IKE Gateway (IKE Phase 1)	Updates the onscreen statistics for the selected IKE gateway. Equivalent to issuing a second show command in the CLI (after an initial show command).	Restarts the selected IKE gateway. IKEv2: Also restarts any associated child IPSec security associations (SAs). IKEv1: Doesn’t restart the associated IPSec SAs. A restart is disruptive to all existing sessions. Equivalent to issuing a clear, test, show command sequence in the CLI.
IPSec Tunnel (IKE Phase 2)	Updates the onscreen statistics for the selected IPSec tunnel. Equivalent to issuing a second show command in the CLI (after an initial show command).	Restarts the IPSec tunnel. A restart is disruptive to all existing sessions. Equivalent to issuing a clear, test, show command sequence in the CLI.

Keep in mind that the result of restarting an IKE gateway depends on whether its IKEv1 or IKEv2.