show crypto ipsec stat

Experts,

On the ASA firewall 9.0 platform, What is the command to clear the counters so that when I issue a "show crypto IPsec stat", it shows 0 for the statistics?
trojan81Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Pete LongTechnical ConsultantCommented:
clear crypto sa counters


Pete
0
trojan81Author Commented:
Pete that command does not exist.
0
Pete LongTechnical ConsultantCommented:
? Hang on........

What happens if you recycle the tunnel?

clear ipsec sa peer X.X.X.X

if you have multiple ISAKMP tunnels

clear crypto isakmp sa

PL
0
Prepare for an Exciting Career in Cybersecurity

Help prevent cyber-threats and provide solutions to safeguard our global digital economy. Earn your MS in Cybersecurity. WGU’s MSCSIA degree program curriculum features two internationally recognized certifications from the EC-Council at no additional time or cost.

Pete LongTechnical ConsultantCommented:
In fact the latter is specified as the command to clear the ISAKMP database
http://www.cisco.com/c/en/us/td/docs/security/asa/asa80/command/reference/cmd_ref/s2.html#wp1342362
(I know that's v 8.0 but the commands are the same) I also know you are looking at IPSEC and not ISAKMP counters, but without phase 1 phase 2 would never establish.

Pete
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
trojan81Author Commented:
hi i'm not looking to bounce the tunnel. I just want to clear the counters.
0
Pete LongTechnical ConsultantCommented:
The only way to do that it recycle the tunnel :(
0
db_prakashCommented:
"clear crypto ipsec sa counters" is the command to clear ipsec sa counters from asa version 8.4 onwards.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.