crypto map lost settings

mwauki
mwauki used Ask the Experts™
on
every now and then the ikev1&ikev2 settings on the outside interface disappeared and the vpn stopped working.
has any of you seen such issue?

only way i fix it is to re enabled by ticking the checkboxes via asdm.

devices used: cisco asa5506

please advise.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Technical Consultant
Commented:
I'm assuming after you tick this, you click Files > Save Changes to Flash?

If you take a backup of the firewall, and compare it when its in its broken state, there should be a crypto checksum number on the the two configs, when its broken are those two numbers the same?

If not then someones either messing with you, or you need to compare your startup and running configurations.

P
mwaukiSystems Engineer

Author

Commented:
thanks Pete!  Let me try that and see how it goes...
mwaukiSystems Engineer

Author

Commented:
wow! thank you so very much, sir Pete!

so here is what i did... i ran the config diff between startup and running config... and there are alot of missmatches...including the checksum.
then, i did the right way of saving (clicking files, save changes to flash) then re run the config diff again and all came out the same...even the checksum number are same for both...

thank you so much!

i will restart the device later on and see if the settings stick then i will come back and close this ticket...
Pete LongTechnical Consultant

Commented:
No problem :)
mwaukiSystems Engineer

Author

Commented:
Again, you are my hero!  for the past 3 months i have been having this issue and i kept googling (perhaps was using wrong search strings??) but no fix.  much much appreciated for your kind help!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial