02-09-2007 09:42 AM - edited 03-05-2019 02:16 PM
I am editing the config of a 1712 remote vpn when I destroyed and recreated crypto map. The change I made took. No problem, but the old map still remains.
This the config:
no crypto map VpNmAp 27 ipsec-isakmp
crypto map VpNmAp 1 ipsec-isakmp
set peer 156.55.132.136
set transform-set VPNcust
match address EncryptSAFCU
crypto map VpNmAp 27 ipsec-isakmp
set peer 156.55.132.136
set transform-set VPNcust
match address EncryptSAFCU
As you can see, this took - crypto map VpNmAp 1 ipsec-isakmp - which is the desired change.
But I am unable to get rid of - crypto map VpNmAp 27 ipsec-isakmp - which I desire to get rid of. Any takes?
02-09-2007 09:56 AM
Did you get any error when you did a no crypto map VpNmAp 27 ipsec-isakmp?
Make sure you remove the map from the interface before making changes
Try this
no crypto map VpNmAp 27 ipsec-isakmp
crypto map VpNmAp 1 ipsec-isakmp
set peer 156.55.132.136
set transform-set VPNcust
match address EncryptSAFCU
HTH, rate if it does
Narayan
02-09-2007 10:06 AM
Thank you guys. I found a way to do it. First I deleted the ipsec-isakmp at the end in a note pad, the did a not "no crypto map VpNmAp 27"
That took care of it. It was a pain.
02-09-2007 10:07 AM
Zubbie
It is one of the odd things that I have found in IOS: while you must specify ipsec-isakmp when you create an entry in the crypto map, you must not specify it when you edit or when you delete the entry. So I suggest that you try this:
no crypto map VpNmAp 27
Try it and I think that you will find that this works.
[edit while I was typing my response, you posted again indicating that you had solved your issue using the technique that I suggested. You may think that it was a pain, but it is the way to delete the map entry. ]
HTH
Rick
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide