Deleting an IPSec Connection

Delete an IPSec connection from OCI.

To disable Site-to-Site VPN between an on-premises network and VCN, you can detach the DRG from the VCN instead of deleting the IPSec connection. If you're also using the DRG with FastConnect, detaching the DRG would also interrupt the flow of traffic over FastConnect.

You can delete the IPSec connection. However, if you later want to reestablish it, a network engineer must configure the CPE device again with a new set of tunnel configuration information from Oracle.

To permanently delete Site-to-Site VPN, you must first terminate the IPSec connection. Then you can delete the CPE object. If you're not using the DRG for another connection to an on-premises network, you can detach it from the VCN and then delete it.

  • To delete an IPSec connection, follow these steps:

    1. On the Site-to-Site VPN list page, find the IPSec connection that you want to delete. If you need help finding the list page or the IPSec connection, see Listing IPSec Connections.
    2. From the Actions menu Actions Menu for the IPSec connection you want to delete, select Terminate.
    3. When prompted, confirm the deletion.

    The IPSec connection is in the Terminating state for a short period while it's being deleted.

  • Use the network ip-sec-connection delete command and required parameters to delete an IPSec connection:

    oci network ip-sec-connection delete --ipsc-id ipsec-ocid ... [OPTIONS]

    For a complete list of parameters and values for CLI commands, see the CLI Command Reference.

  • Run the DeleteIPSecConnection operation to delete an IPSec connection.