Hello

I'm trying to find a way to disable all or a set of IPSec peers within a script in v6.2. In theory something like this should do the trick:

/ip ipsec peer enable [/ip ipsec peer find port=500]

But it doesn't... it just enables the first peer (number 0) and then the terminal prompt just hangs. The extrange thig is that the same line but replacing enable with disable does work ok!:

/ip ipsec peer disable [/ip ipsec peer find proposal-check="obey"

Maybe a bug?
Thanks!

/ipsec peer {
    :foreach i in=[find port=500] do={
        enable $i
    }
}

Yes, I use this to en/disable IPSec Policies since almost ever:

/ip ipsec policy enable [find sa-src-address=1.2.3.4]

Your script block doesn't work, exactly the same behavior: only the first peer got enabled and then the prompt halts until I press Ctlr+C

Thanks!

Hi,
i need to push this thread, because i currently searching for the same solution. Is there any way to disable ipsec peers with a script which looks on the firewall address list.
Background for that is, i detect bad-peers on the firewall and blacklist them. To prefent them to do more bad stuff i wanna disable their ipsec peer until it is localy checked.

Thanks for help!