Pix loxks up changing Crypto map statement

[tony.hanson]

We have a site to site VPN and we are migrating to a new DSL connection on one side and when I went to remove the crypto map so I could put in the new peer address the pix locks up. I've had this happen before and know that there is a procedure to prevent this but don't know what it is. All I'm trying to do is change the address from the: "crypto map AMLVPN 10 set peer xx.xx.xx.xxx" to the new IP address of the new DSL connection.

[sbantz]

You have to remove the crypto map from the interface before adding or changing a tunnel. Otherwise, it will lock up tighter than a drum every time.

no crypto map AMLVPN interface outside

Just be aware it will take down the other tunnels when you do this if they use the same set. When you have your new statements in, assign it to the outside interface once again.

crypto map AMLVPN interface outside