I have a policy based VPN using IKE version 1 with a customer. I use crypto map along with ACL and reverse route injection as shown below. I delete "crypto map entry VPN 123" (no crypto map VPN 123) but static route remains for network 2.2.2.2 in my route table. Is this a bug?
Router#
crypto map VPN 123 ipsec-isakmp
description to CustomerA
set peer 1.2.3.4
set transform-set IPSECAESSHA
set pfs group5
match address CustomerA_encryption_domain
reverse-route static
ip access-list extended CustomerA_encryption_domain
permit host 1.1.1.1 host 2.2.2.2
My code:
Cisco IOS Software, ASR1000 Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.5(3)S10, RELEASE SOFTWARE (fc3)