Find/List Unused Crypto Map Entries?

[nick]

Is there a clever way to audit an ASA to identify all our unused crypto maps associated with tunnels that have been removed or are no longer configured? I know it's relatively easy to find ones in use, but I need to filter down to just the ones that are unused.

[Aditya Ganjoo]

Hi,

Yes, you can check the crypto ACL for any increment in hit counters.

Regards,

Aditya

Please rate helpful and mark correct answers

[nick]

Can you be a little more specific? There's an incredible amount of them to check, if that matters.

[Aditya Ganjoo]

Hi Nick,

Unfortunately, you have to check individual crypto access-list for the hits.

Apart from this option, I do not think there is any way to check for unused crypto maps.

Regards,

Aditya

Please rate helpful and mark correct answers