How to Activate Site to Site tunnel from CLI

Question

Last night I updated the XG firewall from 16.05 to 17.03. The update crashed the system and I can no longer log into the web interface. I immediately contacted support because I had an open ticket related to this. I am going on 14 hours without any help from support and my client is angry because they are down for the second time in a week. I still have SSH access to the box. Is there any way for me to manually initiate tunnels from the CLI? I have to get them up ASAP. I have been digging through the Sophos CLI reference guide and cannot see anything related to this. Any help is appreciated!!

This thread was automatically locked due to age.

apalm123 · Answer

Support gave me these commands before:

to see the list

#swanctl --list-sas

to terminate child SA

#swanctl -t -c <Child name>

to initiate child SA

#swanctl -i -c <Child name>

This may help wiki.strongswan.org/.../Swanctl

Also, if doing that fails to start for whatever reason, I've also heard that there have been people who have had to recreate their VPN's after upgrading.