FAQ-Do IPSec SAs and IKE SAs Generated During Negotiation Need to Be Cleared Orderly

Publication Date:  2015-07-02 Views:  161 Downloads:  0
Issue Description
Do IPSec SAs and IKE SAs Generated During Negotiation Need to Be Cleared Orderly?
Solution
You must clear IPSec SAs generated in phase 2 of the negotiation and then IKE SAs in phase 1. During clearance, the firewall notifies the peer end of deleting corresponding SAs.

END