07-19-2007 04:09 PM - edited 03-11-2019 03:46 AM
An excerpt from my ASA 5510 config:
crypto ipsec transform-set myset esp-des esp-md5-hmac
crypto ipsec transform-set myset2 esp-des esp-none
crypto ipsec security-association lifetime seconds 3600
crypto dynamic-map cisco 1 set security-association lifetime seconds 28800
crypto dynamic-map Outside_dyn_map 1 set security-association lifetime seconds 28800
crypto dynamic-map dynmap 10 set transform-set myset myset2
crypto dynamic-map dynmap 10 set security-association lifetime seconds 28800
crypto map dyn-map 20 set security-association lifetime seconds 28800
crypto map forsberg 21 set security-association lifetime seconds 28800
crypto map Outside_map 65535 set security-association lifetime seconds 28800
crypto map outsidemap 10 ipsec-isakmp dynamic dynmap
crypto map outsidemap interface Outside
I'm unable to remove any of the 'crypto dynamic-map' or 'crypto map' commands.
Am I missing something?
Thanks!
Tom
07-19-2007 06:28 PM
To remove the dynamic crypto map, issue this command.
no crypto dynamic-map dynamic-map-name [dynamic-seq-num]
07-20-2007 02:59 PM
That's what I though to, but it didn't work for me.
I figured it out. You have to use the 'clear config' command.
Take care,
Tom
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide