---
name: "ipsec-down"
section: "8"
platform: "linux"
package: "libreswan"
version: "5.2-2.2"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://carta.tech/man/ipsec-down"
---

# ipsec-down(8)

Down all tunnels sharing same IPsec connection.

## NAME

ipsec-down - Down all tunnels sharing same IPsec connection.

## SYNOPSIS

**ipsec down** *connection* \[--ctlsocket */run/pluto/pluto.ctl*\]

## DESCRIPTION

**ipsec down** commands pluto to tear down all connections matching specified *connection* in internal configuration database. This connection definitions in place so remotes can immediately connect back. If you want tunnel to go permanently down, use **ipsec delete** instead.

Normally, pluto's route to a destination remains in place when an **ipsec down** is used to take the connection down (or if connection setup, or later automatic rekeying, fails). This permits establishing a new connection (perhaps using a different specification; the route is altered as necessary) without having a “window” in which packets might go elsewhere based on a more general route. Such a route can be removed using the **ipsec unroute** operation (and is implicitly removed by **ipsec delete**).

## SEE ALSO

[**ipsec.conf**(5)](/man/ipsec.conf/5.md), [**ipsec**(8)](/man/ipsec/8.md), [**ipsec-add**(8)](/man/ipsec-add/8.md), [**ipsec-algparse**(8)](/man/ipsec-algparse/8.md), [**ipsec-briefconnectionstatus**(8)](/man/ipsec-briefconnectionstatus/8.md), [**ipsec-briefstatus**(8)](/man/ipsec-briefstatus/8.md), [**ipsec-certutil**(8)](/man/ipsec-certutil/8.md), [**ipsec-checkconfig**(8)](/man/ipsec-checkconfig/8.md), [**ipsec-checknflog**(8)](/man/ipsec-checknflog/8.md), [**ipsec-checknss**(8)](/man/ipsec-checknss/8.md), [**ipsec-connectionstatus**(8)](/man/ipsec-connectionstatus/8.md), [**ipsec-crlutil**(8)](/man/ipsec-crlutil/8.md), [**ipsec-delete**(8)](/man/ipsec-delete/8.md), [**ipsec-ecdsasigkey**(8)](/man/ipsec-ecdsasigkey/8.md), [**ipsec-fetchcrls**(8)](/man/ipsec-fetchcrls/8.md), [**ipsec-fipsstatus**(8)](/man/ipsec-fipsstatus/8.md), [**ipsec-globalstatus**(8)](/man/ipsec-globalstatus/8.md), [**ipsec-import**(8)](/man/ipsec-import/8.md), [**ipsec-initnss**(8)](/man/ipsec-initnss/8.md), [**ipsec-letsencrypt**(8)](/man/ipsec-letsencrypt/8.md), [**ipsec-listall**(8)](/man/ipsec-listall/8.md), [**ipsec-listcacerts**(8)](/man/ipsec-listcacerts/8.md), [**ipsec-listcerts**(8)](/man/ipsec-listcerts/8.md), [**ipsec-listcrls**(8)](/man/ipsec-listcrls/8.md), [**ipsec-listen**(8)](/man/ipsec-listen/8.md), [**ipsec-listpubkeys**(8)](/man/ipsec-listpubkeys/8.md), [**ipsec-modutil**(8)](/man/ipsec-modutil/8.md), [**ipsec-newhostkey**(8)](/man/ipsec-newhostkey/8.md), [**ipsec-ondemand**(8)](/man/ipsec-ondemand/8.md), [**ipsec-pk12util**(8)](/man/ipsec-pk12util/8.md), [**ipsec-pluto**(8)](/man/ipsec-pluto/8.md), [**ipsec-purgeocsp**(8)](/man/ipsec-purgeocsp/8.md), [**ipsec-redirect**(8)](/man/ipsec-redirect/8.md), [**ipsec-replace**(8)](/man/ipsec-replace/8.md), [**ipsec-rereadall**(8)](/man/ipsec-rereadall/8.md), [**ipsec-rereadcerts**(8)](/man/ipsec-rereadcerts/8.md), [**ipsec-rereadsecrets**(8)](/man/ipsec-rereadsecrets/8.md), [**ipsec-restart**(8)](/man/ipsec-restart/8.md), [**ipsec-route**(8)](/man/ipsec-route/8.md), [**ipsec-rsasigkey**(8)](/man/ipsec-rsasigkey/8.md), [**ipsec-setup**(8)](/man/ipsec-setup/8.md), [**ipsec-showhostkey**(8)](/man/ipsec-showhostkey/8.md), [**ipsec-showroute**(8)](/man/ipsec-showroute/8.md), [**ipsec-showstates**(8)](/man/ipsec-showstates/8.md), [**ipsec-shuntstatus**(8)](/man/ipsec-shuntstatus/8.md), [**ipsec-start**(8)](/man/ipsec-start/8.md), [**ipsec-status**(8)](/man/ipsec-status/8.md), [**ipsec-stop**(8)](/man/ipsec-stop/8.md), [**ipsec-trafficstatus**(8)](/man/ipsec-trafficstatus/8.md), [**ipsec-unroute**(8)](/man/ipsec-unroute/8.md), [**ipsec-up**(8)](/man/ipsec-up/8.md), [**ipsec-vfychain**(8)](/man/ipsec-vfychain/8.md), [**ipsec-whack**(8)](/man/ipsec-whack/8.md)

## BUGS

none

## AUTHOR

Tuomo Soini