NAME

       ipsec-down - Down all tunnels sharing same IPsec connection.

SYNOPSIS

       ipsec down connection [--ctlsocket /run/pluto/pluto.ctl]

DESCRIPTION

       ipsec down commands pluto to tear down all connections matching specified connection in internal
       configuration database. This connection definitions in place so remotes can immediately connect back. If
       you want tunnel to go permanently down, use ipsec delete instead.

       Normally, pluto's route to a destination remains in place when an ipsec down is used to take the
       connection down (or if connection setup, or later automatic rekeying, fails). This permits establishing a
       new connection (perhaps using a different specification; the route is altered as necessary) without
       having a “window” in which packets might go elsewhere based on a more general route. Such a route can be
       removed using the ipsec unroute operation (and is implicitly removed by ipsec delete).

SEE ALSO

       ipsec.conf(5), ipsec(8), ipsec-add(8), ipsec-algparse(8), ipsec-briefconnectionstatus(8), ipsec-
       briefstatus(8), ipsec-certutil(8), ipsec-checkconfig(8), ipsec-checknflog(8), ipsec-checknss(8), ipsec-
       connectionstatus(8), ipsec-crlutil(8), ipsec-delete(8), ipsec-ecdsasigkey(8), ipsec-fetchcrls(8), ipsec-
       fipsstatus(8), ipsec-globalstatus(8), ipsec-import(8), ipsec-initnss(8), ipsec-letsencrypt(8), ipsec-
       listall(8), ipsec-listcacerts(8), ipsec-listcerts(8), ipsec-listcrls(8), ipsec-listen(8), ipsec-
       listpubkeys(8), ipsec-modutil(8), ipsec-newhostkey(8), ipsec-ondemand(8), ipsec-pk12util(8), ipsec-
       pluto(8), ipsec-purgeocsp(8), ipsec-redirect(8), ipsec-replace(8), ipsec-rereadall(8), ipsec-
       rereadcerts(8), ipsec-rereadsecrets(8), ipsec-restart(8), ipsec-route(8), ipsec-rsasigkey(8), ipsec-
       setup(8), ipsec-showhostkey(8), ipsec-showroute(8), ipsec-showstates(8), ipsec-shuntstatus(8), ipsec-
       start(8), ipsec-status(8), ipsec-stop(8), ipsec-trafficstatus(8), ipsec-unroute(8), ipsec-up(8), ipsec-
       vfychain(8), ipsec-whack(8)

BUGS

       none

AUTHOR

       Tuomo Soini

Libreswan 5.2                                      07/30/2025                                      IPSEC-DOWN(8)