Hi Alex,
May I know the device model and Junos version?
Is your Initiator Cookie changing every time when you manually clear the IKE SA? If that's the case, it means the IKE is cleared successfully and it is re-initiating the negotiation.
May I know what are you trying to achieve here?
------------------------------
***π«π ππππ ππππ ππππππ ππ πΊπππππ
, ππ ππ ππ
π
ππππππ ππππ πππππ***
π½ππππππ,
ππππ ππππππ.
------------------------------
Original Message:
Sent: 04-06-2021 04:07
From: Unknown User
Subject: IKE security-association wont clear
Hi All,
Hope you're well -
I have a IKE security association that wont clear and wanted to check next steps
I've tried clearing the IKE using the following
clear security ike security-associations index 2428393
clear security ike security-associations xxx.xxx.xxx.xxx
The fact the IKE SA is present still isn't causing issues for the VPN as this is coming up under a new security association however its more of an admin/ tidy device easy life situation.
As this is a production firewall I am hesitant to run restart IPsec-key-management or have the device rebooted however if this is what is required, I will schedule a maintenance period
Any thoughts would be great
Thanks,
Alex