Quick query regarding site-to-site vpn's for ASA 8.2 code

[monkeyboy]

Hi, I seem to remember that if you change any of the vpn settings through the CLI you need to remove the crypto map from the interface before & re-apply after. Is this still the case - ie do you have to have downtime on existing vpn's when adding new vpn peers - FYI we are running 8.2 code for our ASA's...

I can't imagine this to be the case..

TIA

Mark

[Federico Coto Fajardo · Accepted solution]

Hi,

There's no need to remove the crypto map from the interface anymore.

If you remove say the peer... you get an incomplete crypto map error... but that's it.

Federico.

[monkeyboy]

..thanks again for your help