Description
This article describes that iIn some case(s), it may be necessary to reset a VPN tunnel so the SA sessions will be cleared.
It is possible to 'flush' a tunnel so the SAs can be re-established.
Scope
FortiGate.
Solution
diagnose vpn tunnel flush <my-phase1-name>
or use the below command as well:
diagnose vpn ike gateway clear name <my-phase1-name>
Note.
Replace 'my-phase1-name' with the name of the Phase1 part of the VPN tunnel. If the name is NOT specified, all tunnels will be 'flushed'.
Related article:
Technical Note: How to bring down the shortcut VPN tunnel created by Auto-Discovery VPN (ADVPN)
