Are there any sequence requirements for clearing the IKE SA and IPSec
Yes. Run the reset ipsec sa command to clear the IPSec SA, and then run the reset ike sa command to clear the IKE SA. During clearance, the
USG9000 requires the peer end to delete corresponding SAs.