Remove particular tunnel configuration

[dhananjayam]

Hi,

Multiple ipsec  tunels are configured on ASA5540 .how to remove particular tunnel configuration so it shouldn't effect other tunnels..

-Sample config

-Orginal edited.

Sh run crypto

crypto map CRYPMAP_OUTSIDE 1 match address VPN_A-->B

crypto map CRYPMAP_OUTSIDE 1 set pfs

crypto map CRYPMAP_OUTSIDE 1 set peer 1.1.1.1

crypto map CRYPMAP_OUTSIDE 1 set transform-set ESP-AES-192-SHA

crypto map CRYPMAP_OUTSIDE 1 set security-association lifetime kilobytes 4608000

crypto map CRYPMAP_OUTSIDE 2 match address VPN_C->D

crypto map CRYPMAP_OUTSIDE 2 set pfs

crypto map CRYPMAP_OUTSIDE 2 set peer 2.2.2.2

crypto map CRYPMAP_OUTSIDE 2 set transform-set ESP-AES-192-SHA

crypto map CRYPMAP_OUTSIDE 2 set security-association lifetime kilobytes 4608000

crypto map CRYPMAP_OUTSIDE 2 match address VPN_E-->F

crypto map CRYPMAP_OUTSIDE 2 set pfs

crypto map CRYPMAP_OUTSIDE 2 set peer 3.3.3.3

crypto map CRYPMAP_OUTSIDE 2 set transform-set ESP-AES-192-SHA

crypto map CRYPMAP_OUTSIDE 2 set security-association lifetime kilobytes 4608000

Need to remove   VPN_C>D

Regards

Dhananjaya.m

[laramire2]

Hello Dhananjaya.m,

I hope you're doing great

In order to remove all or specified crypto maps from the configuration, you could use the clear configure crypto map command in global configuration:

clear configure crypto map map-name seq-num

For instance if you would like to remove the VPN connection associated with crypto map 2, you could use the following commands:

conf t

clear configure crypto map CRYPMAP_OUTSIDE 2

clear configure tunnel-group 2.2.2.2

exit

This should not affect any other VPN connection.

I hope this helps,

Luis.