Symptom

"clear crypto ikev2 stats" clears active SA and negotiating SA counter in "show crypto ikev2 stats". Ideally the command should only clear other counters like - rejected, IKEv2 packets dropped at dispatch, Incoming IKEV2 Cookie Challenged Requests etc.

Conditions

>> IKEv2 being used. >> "clear crypto ikev2 stats" command executed.

Workaround

Refer the output of "show crypto ikev2 count" to check the number of current active SA.

Further Problem Description