Network Security
Enable, Disable, Refresh, or Restart an IKE Gateway or IPSec Tunnel
Table of Contents
Enable, Disable, Refresh, or Restart an IKE Gateway or IPSec Tunnel
| Where Can I Use This? | What Do I Need? |
|---|---|
| No license required |
Enable or Disable an IKE Gateway or IPSec Tunnel
- Enable or disable an IKE gateway.
- Select and select the gateway you want to enable or disable.At the bottom of the screen, click Enable or Disable.Enable or disable an IPSec tunnel.
- Select and select the tunnel you want to enable or disable.At the bottom of the screen, click Enable or Disable.
Refresh or Restart an IKE Gateway or IPSec Tunnel
You can refresh or restart an IKE gateway or IPSec tunnel. The refresh and restart behaviors for an IKE gateway and IPSec tunnel are as follows:PhaseRefreshRestartIKE Gateway (IKE Phase 1)Updates the onscreen statistics for the selected IKE gateway.Equivalent to issuing a second show command in the CLI (after an initial show command).Restarts the selected IKE gateway.IKEv2: Also restarts any associated child IPSec security associations (SAs).IKEv1: Doesn’t restart the associated IPSec SAs.A restart is disruptive to all existing sessions.Equivalent to issuing a clear, test, show command sequence in the CLI.IPSec Tunnel (IKE Phase 2)Updates the onscreen statistics for the selected IPSec tunnel.Equivalent to issuing a second show command in the CLI (after an initial show command).Restarts the IPSec tunnel.A restart is disruptive to all existing sessions.Equivalent to issuing a clear, test, show command sequence in the CLI.Keep in mind that the result of restarting an IKE gateway depends on whether its IKEv1 or IKEv2.- Refresh or restart an IKE gateway.
- Select and select the tunnel for the gateway you want to refresh or restart.In the row for that tunnel, under the Status column, click IKE Info.At the bottom of the IKE Info screen, click the action you want:
- Refresh—Updates the statistics on the screen.
- Restart—Clears the SAs, so traffic is dropped until the IKE negotiation starts over and the tunnel is recreated.
Refresh or restart an IPSec tunnel.You might determine that the tunnel needs to be refreshed or restarted because you use the tunnel monitor to monitor the tunnel status, or you use an external network monitor to monitor network connectivity through the IPSec tunnel.- Select and select the tunnel you want to refresh or restart.In the row for that tunnel, under the Status column, click Tunnel Info.At the bottom of the Tunnel Info screen, click the action you want:
- Refresh—Updates the onscreen statistics.
- Restart—Clears the SAs, so traffic is dropped until the IKE negotiation starts over and the tunnel is recreated.
