48.7.8. Starting and Stopping an IPsec Connection
If the IPsec connection was not configured to activate on boot, you can control it from the command line.
To start the connection, use the following command on each host for host-to-host IPsec, or each IPsec router for network-to-network IPsec:
ifup <nickname>
where <nickname> is the nickname configured earlier, such as
ipsec0.
To stop the connection, use the following command:
ifdown <nickname>