Cisco CRS User Manual

clear crypto ipsec sa
To delete specific security associations (SAs), or all SAs in the IP Security (IPSec) security associations
database (SADB), use the clear crypto ipsec sa command.
clear crypto ipsec sa {sa-id| all| counters | {sa-id| all}| interface tunnel-ipsec}
Syntax Description
Identifier for the SA. IPSec supports from 1 to 64,500 sessions.
sa-id
Deletes all IPSec SAs in the IPSec SADB.all
Clears the counters in the IPSec SADB.counters
Clears the interfaces in the IPSec SADB.interface
The range of tunnel-ipsec is <0-4294967295>.tunnel-ipsec
Command Default
No default behavior or values
Command Modes
EXEC
Command History
ModificationRelease
This command was introduced.Release 2.0
The range for the sa-id argument increased to 16500 sessions.
Release 3.4.0
The upper limit for the sa-id argument range was increased to 64,500
sessions.
Release 3.6.0
Usage Guidelines
SAs are established to secure data flows in IPSec. Use the clear crypto ipsec sa command to delete active
IPSec sessions or force IPSec to reestablish new SAs. Usually, the establishment of SAs is negotiated between
peers through Internet Key Exchange (IKE) on behalf of IPSec.
Task ID
OperationsTask ID
executecrypto
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
130 OL-24740-01
IPSec Commands
clear crypto ipsec sa

Cisco CRS Specifications

General

Brand	Cisco
Model	CRS
Category	Network Router
Language	English