Deleting crypto map 27 ipsec-isakmp

zekwueme1 · ‎02-09-2007

I am editing the config of a 1712 remote vpn when I destroyed and recreated crypto map. The change I made took. No problem, but the old map still remains.

This the config:

no crypto map VpNmAp 27 ipsec-isakmp

crypto map VpNmAp 1 ipsec-isakmp

set peer 156.55.132.136

set transform-set VPNcust

match address EncryptSAFCU

crypto map VpNmAp 27 ipsec-isakmp

set peer 156.55.132.136

set transform-set VPNcust

match address EncryptSAFCU

As you can see, this took - crypto map VpNmAp 1 ipsec-isakmp - which is the desired change.

But I am unable to get rid of - crypto map VpNmAp 27 ipsec-isakmp - which I desire to get rid of. Any takes?

royalblues · ‎02-09-2007

Did you get any error when you did a no crypto map VpNmAp 27 ipsec-isakmp?

Make sure you remove the map from the interface before making changes

Try this

no crypto map VpNmAp 27 ipsec-isakmp

crypto map VpNmAp 1 ipsec-isakmp

set peer 156.55.132.136

set transform-set VPNcust

match address EncryptSAFCU

HTH, rate if it does

Narayan

zekwueme1 · ‎02-09-2007

Thank you guys. I found a way to do it. First I deleted the ipsec-isakmp at the end in a note pad, the did a not "no crypto map VpNmAp 27"

That took care of it. It was a pain.

Richard Burts · ‎02-09-2007

Zubbie

It is one of the odd things that I have found in IOS: while you must specify ipsec-isakmp when you create an entry in the crypto map, you must not specify it when you edit or when you delete the entry. So I suggest that you try this:

no crypto map VpNmAp 27

Try it and I think that you will find that this works.

[edit while I was typing my response, you posted again indicating that you had solved your issue using the technique that I suggested. You may think that it was a pain, but it is the way to delete the map entry. ]

HTH

Rick

HTH

Rick