topic Re: Unable to Remove Command: crypto ipsec security-associations pmtus in Network Security

Unable to Remove Command: crypto ipsec security-associations pmtus-agi

Tony T. — Mon, 24 Jul 2023 20:06:25 GMT

Hello,

I have a firepower 2130 with 9.14(2)13 ASA software.

Through the cli, I've tried removing the following command:

no crypto ipsec security-associations pmtus-aging infinite

However, the command does not go away.

Have been searching through endless sites online and can't find anything.

Any assistance in the matter would be appreciated.

Re: Unable to Remove Command: crypto ipsec security-associations pmtus

MHM Cisco World — Mon, 24 Jul 2023 20:20:06 GMT

no crypto ipsec security-associations pmtus-aging infinite<<- use this command without infinite keyword

Re: Unable to Remove Command: crypto ipsec security-associations pmtus

Tony T. — Mon, 24 Jul 2023 20:24:42 GMT

@MHM Cisco World I just tried it and the command is still there.

Re: Unable to Remove Command: crypto ipsec security-associations pmtus

tvotna — Tue, 25 Jul 2023 13:04:03 GMT

This command is there by default. You cannot and need not delete it.

Re: Unable to Remove Command: crypto ipsec security-associations pmtus

MHM Cisco World — Tue, 25 Jul 2023 14:13:09 GMT

If I have time I will try in my lab idea I have

Thanks

MHM

Re: Unable to Remove Command: crypto ipsec security-associations pmtus

MHM Cisco World — Tue, 25 Jul 2023 14:31:43 GMT

you can change the timeout and NO is work to delete this change which retrun the value to it default ""infinite"".
NOTE:- to all see this post later this command appear in show run all