OS Manuals

ipsec-down(8)

IPSEC-DOWN(8) Executable programs IPSEC-DOWN(8)


.SH "NAME" ipsec-down - Down all tunnels sharing same IPsec connection.


.SH "SYNOPSIS"


.HP 264u


ipsec down
connection
[--ctlsocket /run/pluto/pluto.ctl]


.SH "DESCRIPTION"


.PP ipsec down commands pluto to tear down all connections matching specified connection in internal configuration database. This connection definitions in place so remotes can immediately connect back. If you want tunnel to go permanently down, use ipsec delete instead.


.PP Normally, pluto's route to a destination remains in place when an ipsec down is used to take the connection down (or if connection setup, or later automatic rekeying, fails). This permits establishing a new connection (perhaps using a different specification; the route is altered as necessary) without having a “window” in which packets might go elsewhere based on a more general route. Such a route can be removed using the ipsec unroute operation (and is implicitly removed by ipsec delete).


.SH "SEE ALSO"


.PP ipsec.conf(5), ipsec(8), ipsec-add(8), ipsec-algparse(8), ipsec-briefconnectionstatus(8), ipsec-briefstatus(8), ipsec-certutil(8), ipsec-checkconfig(8), ipsec-checknflog(8), ipsec-checknss(8), ipsec-connectionstatus(8), ipsec-crlutil(8), ipsec-delete(8), ipsec-ecdsasigkey(8), ipsec-fetchcrls(8), ipsec-fipsstatus(8), ipsec-globalstatus(8), ipsec-import(8), ipsec-initnss(8), ipsec-letsencrypt(8), ipsec-listall(8), ipsec-listcacerts(8), ipsec-listcerts(8), ipsec-listcrls(8), ipsec-listen(8), ipsec-listpubkeys(8), ipsec-modutil(8), ipsec-newhostkey(8), ipsec-ondemand(8), ipsec-pk12util(8), ipsec-pluto(8), ipsec-purgeocsp(8), ipsec-redirect(8), ipsec-replace(8), ipsec-rereadall(8), ipsec-rereadcerts(8), ipsec-rereadsecrets(8), ipsec-restart(8), ipsec-route(8), ipsec-rsasigkey(8), ipsec-setup(8), ipsec-showhostkey(8), ipsec-showroute(8), ipsec-showstates(8), ipsec-shuntstatus(8), ipsec-start(8), ipsec-status(8), ipsec-stop(8), ipsec-trafficstatus(8), ipsec-unroute(8), ipsec-up(8), ipsec-vfychain(8), ipsec-whack(8)


.SH "BUGS"


.PP none


.SH "AUTHOR"


Andrew Cagney, Tuomo Soini

10/23/2026 Libreswan v5.4.1-HEAD

libreswan 5.4.1-r1 · enterprise-packages · ingested 2026-10-24