Removing a key group from an SDP, VPRN service, or PW template

Use the following CLI syntax to remove a key group from an SDP, VPRN service, or PW template:

Note: After removing a key group to the PW template, the following tools command must be executed:

tools>perform>service>eval-pw-template>allow-service-impact

config>service# sdp sdp-id
        — no encryption-keygroup direction {inbound | outbound}

config>service# vprn service-id 
        — no encryption-keygroup direction {inbound | outbound}

config>service# pw-template policy-id auto-gre-sdp 
        — no encryption-keygroup direction {inbound | outbound}

The following examples display a key group removed from an SDP, VPRN service, or PW template:

config>service# sdp 61
    config>service>sdp# no encryption-keygroup direction inbound
    config>service>sdp# no encryption-keygroup direction outbound

config>service# vprn 22 
    config>service>vprn# no encryption-keygroup direction inbound
    config>service>vprn# no encryption-keygroup direction outbound

config>service# pw-template 12
    config>service>pw-template# no encryption-keygroup direction inbound
    config>service>pw-template# no encryption-keygroup direction outbound
    tools>perform>service>eval-pw-template>allow-service-impact

The following example shows that the key group configuration has been removed from an SDP or a VPRN service.

domain1>config>service# info 
----------------------------------------------
...
        sdp 61 create
            shutdown
            far-end 10.10.10.10
            exit
        exit
...
...
        vprn 22 customer 1 create
            shutdown
        exit
...
----------------------------------------------
domain1>config>service# info