cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
879
Views
0
Helpful
4
Replies

Crypto map removing itself after reload

Jwillmanaesd
Level 1
Level 1

Hello,

I just set up my site tot site vpn with a pix box and a cisco 3745.

The pix box is fine but the 3745 when ever I reload it the crypto map is not applied to the interface after the reload.

1 Accepted Solution

Accepted Solutions

hi,

i highly suspect this could be an IOS bug on your 3745.

try updating the IOS and test again.

loosing part of config (in crypto-maps) after reload or power-cycle

CSCeb20989

Symptoms: After a Cisco router has reloaded, part of the configuration that is
defined in the startup configuration may not show up in crypto maps.
Conditions: This symptom is observed on any Cisco platform that has an
interface that requires a controller statement under the following conditions:
- You enter the crypto map map-name
local-address interface-id global
configuration command.
- For the interface-id argument, you enter the interface
that is configured by the controller statement.
- There are more than 35 instances of the crypto map
map-name local-address
interface-id global configuration command in the startup
configuration.
Workaround: After the router has reloaded, enter the copy
startup-config running-config EXEC command.

View solution in original post

4 Replies 4

johnlloyd_13
Level 9
Level 9

hi john,

just to cover basics, did you save the config by doing a write memory?

also, what's the show version output? it could be a confreg issue.

Hello,

I did issue a write memory.

sh ver

Cisco IOS Software, 3700 Software (C3745-ADVENTERPRISEK9-M), Version 12.4(25), R                                                                             ELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2009 by Cisco Systems, Inc.

Compiled Tue 21-Apr-09 14:41 by prod_rel_team

ROM: System Bootstrap, Version 12.2(8r)T2, RELEASE SOFTWARE (fc1)

FIBERJGX-3745-01 uptime is 3 hours, 49 minutes

System returned to ROM by reload at 01:32:53 UTC Fri Jul 5 2013

System restarted at 01:34:09 UTC Fri Jul 5 2013

System image file is "slot0:c3745-adventerprisek9-mz.124-25.bin"

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

export@cisco.com.

Cisco 3745 (R7000) processor (revision 2.0) with 243712K/18432K bytes of memory.

Processor board ID JMX0837L5AU

R7000 CPU at 350MHz, Implementation 39, Rev 3.3, 256KB L2, 2048KB L3 Cache

2 FastEthernet interfaces

DRAM configuration is 64 bits wide with parity disabled.

151K bytes of NVRAM.

31360K bytes of ATA System CompactFlash (Read/Write)

125952K bytes of ATA Slot0 CompactFlash (Read/Write)

Configuration register is 0x2102

hi,

i highly suspect this could be an IOS bug on your 3745.

try updating the IOS and test again.

loosing part of config (in crypto-maps) after reload or power-cycle

CSCeb20989

Symptoms: After a Cisco router has reloaded, part of the configuration that is
defined in the startup configuration may not show up in crypto maps.
Conditions: This symptom is observed on any Cisco platform that has an
interface that requires a controller statement under the following conditions:
- You enter the crypto map map-name
local-address interface-id global
configuration command.
- For the interface-id argument, you enter the interface
that is configured by the controller statement.
- There are more than 35 instances of the crypto map
map-name local-address
interface-id global configuration command in the startup
configuration.
Workaround: After the router has reloaded, enter the copy
startup-config running-config EXEC command.

Thanks I never considered it to be a bug but the update did fix the problem.