| IPSEC-DOWN(8) | Executable programs | IPSEC-DOWN(8) |
.SH "NAME" ipsec-down - Down all tunnels sharing same IPsec
connection.
.SH "SYNOPSIS"
.HP 264u
ipsec down
connection
[--ctlsocket /run/pluto/pluto.ctl]
.SH "DESCRIPTION"
.PP ipsec down commands pluto to tear down all connections matching
specified connection in internal configuration database. This
connection definitions in place so remotes can immediately connect back. If
you want tunnel to go permanently down, use ipsec delete instead.
.PP Normally, pluto's route to a destination remains in place when an
ipsec down is used to take the connection down (or if connection
setup, or later automatic rekeying, fails). This permits establishing a new
connection (perhaps using a different specification; the route is altered as
necessary) without having a “window” in which packets might go
elsewhere based on a more general route. Such a route can be removed using
the ipsec unroute operation (and is implicitly removed by ipsec
delete).
.SH "SEE ALSO"
.PP ipsec.conf(5), ipsec(8), ipsec-add(8),
ipsec-algparse(8), ipsec-briefconnectionstatus(8),
ipsec-briefstatus(8), ipsec-certutil(8),
ipsec-checkconfig(8), ipsec-checknflog(8),
ipsec-checknss(8), ipsec-connectionstatus(8),
ipsec-crlutil(8), ipsec-delete(8),
ipsec-ecdsasigkey(8), ipsec-fetchcrls(8),
ipsec-fipsstatus(8), ipsec-globalstatus(8),
ipsec-import(8), ipsec-initnss(8),
ipsec-letsencrypt(8), ipsec-listall(8),
ipsec-listcacerts(8), ipsec-listcerts(8),
ipsec-listcrls(8), ipsec-listen(8),
ipsec-listpubkeys(8), ipsec-modutil(8),
ipsec-newhostkey(8), ipsec-ondemand(8),
ipsec-pk12util(8), ipsec-pluto(8), ipsec-purgeocsp(8),
ipsec-redirect(8), ipsec-replace(8),
ipsec-rereadall(8), ipsec-rereadcerts(8),
ipsec-rereadsecrets(8), ipsec-restart(8),
ipsec-route(8), ipsec-rsasigkey(8), ipsec-setup(8),
ipsec-showhostkey(8), ipsec-showroute(8),
ipsec-showstates(8), ipsec-shuntstatus(8),
ipsec-start(8), ipsec-status(8), ipsec-stop(8),
ipsec-trafficstatus(8), ipsec-unroute(8), ipsec-up(8),
ipsec-vfychain(8), ipsec-whack(8)
.SH "BUGS"
.PP none
.SH "AUTHOR"
Andrew Cagney, Tuomo Soini
| 08/30/2026 | Libreswan v5.4-HEAD |