07-19-2007 04:09 PM - edited 03-11-2019 03:46 AM
An excerpt from my ASA 5510 config:
crypto ipsec transform-set myset esp-des esp-md5-hmac
crypto ipsec transform-set myset2 esp-des esp-none
crypto ipsec security-association lifetime seconds 3600
crypto dynamic-map cisco 1 set security-association lifetime seconds 28800
crypto dynamic-map Outside_dyn_map 1 set security-association lifetime seconds 28800
crypto dynamic-map dynmap 10 set transform-set myset myset2
crypto dynamic-map dynmap 10 set security-association lifetime seconds 28800
crypto map dyn-map 20 set security-association lifetime seconds 28800
crypto map forsberg 21 set security-association lifetime seconds 28800
crypto map Outside_map 65535 set security-association lifetime seconds 28800
crypto map outsidemap 10 ipsec-isakmp dynamic dynmap
crypto map outsidemap interface Outside
I'm unable to remove any of the 'crypto dynamic-map' or 'crypto map' commands.
Am I missing something?
Thanks!
Tom
07-19-2007 06:28 PM
To remove the dynamic crypto map, issue this command.
no crypto dynamic-map dynamic-map-name [dynamic-seq-num]
07-20-2007 02:59 PM
That's what I though to, but it didn't work for me.
I figured it out. You have to use the 'clear config' command.
Take care,
Tom
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: