Can't remove command

tom.gill — Mon, 11 Mar 2019 10:46:44 GMT

An excerpt from my ASA 5510 config:

crypto ipsec transform-set myset esp-des esp-md5-hmac

crypto ipsec transform-set myset2 esp-des esp-none

crypto ipsec security-association lifetime seconds 3600

crypto dynamic-map cisco 1 set security-association lifetime seconds 28800

crypto dynamic-map Outside_dyn_map 1 set security-association lifetime seconds 28800

crypto dynamic-map dynmap 10 set transform-set myset myset2

crypto dynamic-map dynmap 10 set security-association lifetime seconds 28800

crypto map dyn-map 20 set security-association lifetime seconds 28800

crypto map forsberg 21 set security-association lifetime seconds 28800

crypto map Outside_map 65535 set security-association lifetime seconds 28800

crypto map outsidemap 10 ipsec-isakmp dynamic dynmap

crypto map outsidemap interface Outside

I'm unable to remove any of the 'crypto dynamic-map' or 'crypto map' commands.

Am I missing something?

Thanks!

Tom

Re: Can't remove command

Wizzle — Fri, 20 Jul 2007 01:28:56 GMT

To remove the dynamic crypto map, issue this command.

no crypto dynamic-map dynamic-map-name [dynamic-seq-num]

tom.gill — Fri, 20 Jul 2007 21:59:00 GMT

That's what I though to, but it didn't work for me.

I figured it out. You have to use the 'clear config' command.

Take care,

Tom