Terminate current VPN sessions on Cisco router/ASA

shands — Thu, 17 Sep 2009 18:23:23 +0000

Many a time I have to kick remote users off a Cisco router / ASA box. This depends on your configuration – but here’s how to close one or all VPN user sessions on the PPTP setup we created in an earlier how-to. First, we’ll check to see who’s online:

phbrtr#sh vpdn session

PPTP Session Information Total tunnels 1 sessions 1

LocID RemID TunID Intf Username State Last Chg Uniq ID
32 32768 37 Vi3 user estabd 00:00:18 31
phbrtr#

That pesky user!! Lets disconnect him..

phbrtr#clear vpdn tunnel pptp id 37
Starting to clear the tunnel
phbrtr#

Note here that we’ve used the TunID from the previous command (in this case – 37). Another quick ‘show vpdn session’ (or for the lazy: ‘sh u’) will show that your user has disappeared.

If you’ve got a lot of users, looking up their id and clearing can be quite tedious. To clear ALL PPTP sessions:

phbrtr#clear vpdn tunnel pptp all
Clear all PPTP tunnels? [confirm]
Starting to clear the tunnel

phbrtr#

Simples!

phirebird » disconnect

Terminate current VPN sessions on Cisco router/ASA