Technical Tip: How to flush a VPN tunnel

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 196631

Description

This article describes the process to reset a VPN tunnel to clear the SA sessions and re-establish SA.

Scope

FortiGate.

Solution

diagnose vpn tunnel flush <my-phase1-name>

Or use the below command as well:

diagnose vpn ike gateway clear name <my-phase1-name>

Note.

Replace 'my-phase1-name' with the name of the Phase1 part of the VPN tunnel. If the name is NOT specified, all tunnels will be 'flushed'.

The command 'diagnose vpn tunnel flush' might not flush the tunnel in some FortiOS versions. Use 'diagnose vpn ike gateway clear name <my-phase1-name>' instead. Check the output when both commands are used on v7.4.3.

diag vpn ike gateway clear name.png

97869

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.