IPSEC-UNROUTE(8)

πŸ’… IPSEC-UNROUTE πŸ’…

okay bestie, welcome to ipsec-unroute, straight out of section 8 of the manual (the big scary admin one, you got this 🫢). she's small, she's focused, she does one job and she does it flawlessly. no cap.


✨ NAME ✨

ipsec-unroute β€” unroute a connection πŸ’«


🌸 SYNOPSIS 🌸

ipsec unroute connection [--config /etc/ipsec.conf]
              [--ctlsocket /run/pluto/pluto.ctl]

πŸ¦‹ DESCRIPTION πŸ¦‹

okay so picture this: you had a connection that was routed, and now there's route + policy leftovers just... sitting there like crumbs on the counter 😭. ipsec unroute is the broom. it removes the routes and policies left behind from a connection that was previously routed. clean sweep, periodt.

for example, ipsec down leaves states behind on purpose so the connection can hang out in the ondemand state. it's not being messy, it's being intentional, iykyk.

but if your actual goal is to completely disable the connection, bestie, do NOT use this one β€” you want ipsec delete connection instead. it's giving full send. πŸ—‘οΈβœ¨


πŸ‘‘ SEE ALSO πŸ‘‘

the whole friend group, fr fr πŸ’œ:

ipsec.conf(5), ipsec(8), ipsec-add(8), ipsec-algparse(8), ipsec-briefconnectionstatus(8), ipsec-briefstatus(8), ipsec-certutil(8), ipsec-checkconfig(8), ipsec-checknflog(8), ipsec-checknss(8), ipsec-connectionstatus(8), ipsec-crlutil(8), ipsec-delete(8), ipsec-down(8), ipsec-ecdsasigkey(8), ipsec-fetchcrls(8), ipsec-fipsstatus(8), ipsec-globalstatus(8), ipsec-import(8), ipsec-initnss(8), ipsec-letsencrypt(8), ipsec-listall(8), ipsec-listcacerts(8), ipsec-listcerts(8), ipsec-listcrls(8), ipsec-listen(8), ipsec-listpubkeys(8), ipsec-modutil(8), ipsec-newhostkey(8), ipsec-ondemand(8), ipsec-pk12util(8), ipsec-pluto(8), ipsec-purgeocsp(8), ipsec-redirect(8), ipsec-replace(8), ipsec-rereadall(8), ipsec-rereadcerts(8), ipsec-rereadsecrets(8), ipsec-restart(8), ipsec-route(8), ipsec-rsasigkey(8), ipsec-setup(8), ipsec-showhostkey(8), ipsec-showroute(8), ipsec-showstates(8), ipsec-shuntstatus(8), ipsec-start(8), ipsec-status(8), ipsec-stop(8), ipsec-trafficstatus(8), ipsec-up(8), ipsec-vfychain(8), ipsec-whack(8)


πŸ’€ BUGS πŸ’€

none

not a single one. she's flawless, she's that girl, we love a bug-free icon πŸ™ˆπŸ’–


πŸŽ€ AUTHOR πŸŽ€

Andrew Cagney, Tuomo Soini β€” legends, honestly, ty for your service 🫢


and that's the whole page!! this documentation came to you courtesy of Libreswan 5.4.1, dated 10/23/2026 β€” go forth and unroute responsibly, bestie πŸŒˆβ­πŸ’œ

πŸ“¦ where this page comes from