// Module included in the following assemblies:
//
// * networking/network_security/configuring-ipsec-ovn.adoc

:_mod-docs-content-type: PROCEDURE
[id="nw-ovn-ipsec-north-south-disable_{context}"]
= Disabling IPsec encryption for an external IPsec endpoint

[role="_abstract"]
To stop encrypting traffic to an external host in {product-title}, you can remove the IPsec tunnel configuration from your cluster nodes.

.Prerequisites

* Install the {oc-first}.
* You are logged in to the cluster as a user with `cluster-admin` privileges.
* You enabled IPsec in either `Full` or `External` mode on your cluster.

.Procedure

. Create a file named `remove-ipsec-tunnel.yaml` with the following YAML:
+
[source,yaml]
----
kind: NodeNetworkConfigurationPolicy
apiVersion: nmstate.io/v1
metadata:
  name: <name>
spec:
  nodeSelector:
    kubernetes.io/hostname: <node_name>
  desiredState:
    interfaces:
    - name: <tunnel_name>
      type: ipsec
      state: absent
----
+
--
where:

`name`:: Specifies a name for the node network configuration policy.
`node_name`:: Specifies the name of the node where the IPsec tunnel that you want to remove exists.
`tunnel_name`:: Specifies the interface name for the existing IPsec tunnel.
--

. To remove the IPsec tunnel, enter the following command:
+
[source,terminal]
----
$ oc apply -f remove-ipsec-tunnel.yaml
----
