Changing ISAKMP keys

[psnell]

I have a Pix 506 running v6.1(2) that I need to change the ISAKMP key on. When I input the new key it errors out telling me that a key already exists, but I can't find how to clear the existing key. Any suggestions appreciated. -- Pete

[jins]

Try this...

no isakmp key address netmask no-xauth no-config-mode

isakmp key address netmask no-xauth no-config-mode

-jins

[psnell]

I am aware of that command, but the problem is this is an inherited system and I do not know the old key. I am trying to change the key to one I know without blowing up the whole iaskmp config with the clear iaskmp outside command. Sorry for not mentioning this in the original post. -- Pete

[schindler · Accepted solution]

Download your Pix's config to a tftp-server. The stored config file shows the keys in clear text.

--Andreas

[psnell]

That worked! Thanks Andreas.