Temporarily Disable GetVPN

[mhmservice]

Hi all

We are experiencing intermittent problems with a site and for troubleshooting purposes i'd like to temporarily disable GetVPN,

Currently the router has 1x interface with the crypto map enabled as such:

interface GigabitEthernet0/0
description *** TOWARDS WAN ***
ip address 172.16.100.2 255.255.255.0
duplex auto
speed auto

standby 0 ip 172.16.100.1

standby 0 priority 105
standby 0 preempt
standby 0 authentication XXXXXXXXXXXXXXXXXXXXX
crypto map getvpn

I executed the command on the interface "no crypto map getvpn" but the traffic to/from the site completely stops flowing

Can anyone assist with a better way to perform this task?

Thanks in advance

[Mohammed al Baqari]

You need to remove crypto-map from both sides of the link. If you did that
then check if you have acls limiting communication to be between
crypto-peer-ips only and not allowing direct lan-to-lan flows. Check also
that routing is established

[Julio E. Moisa]

Hi

Are you using authorization list on the KS device? try removing the peer from the ACL. As mentioned previously also chech the interested traffic ACLs.