Cisco Bug: CSCtf25508 - Virtual-Access int not being released after ezvpn client disconnects
Jan 31, 2017
- Cisco IOS
Known Affected Releases
12.4(24)T 12.4(24)T1 12.4(24)T2
Symptoms: ISAKMP profiles cannot be removed. The following error message is shown: %Profile is applied to Virtual-Access2-head-0/65536 and possibly other crypto maps Note: The "2" in the error message will differ based on your configuration. In the above message, "Virtual-Access2" is referenced because the VTI number, in this case, is 2. This keeps many stale dynamic crypto map entries without any valid IPSec SA or virtual access interfaces. Conditions: The symptom is observed under the following conditions: - Using VTI with EzVPN. - Only seen with Cisco IOS Release 12.4(24)T.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases