[c-nsp] strange crypto map on C891f

[Nikolas Geyer]

It's used for internal crypto self tests during boot up, there was a bug about it about 18 months ago making it visible like you are seeing but I don't recall it affecting 15.4.

Log a case with TAC.

Sent from my iPhone

> On 28 Dec 2016, at 6:53 AM, Juergen Marenda <cnsp at marenda.net> wrote:
> 
> 
> Hi,
> 
> i just migrated a pair of 1812's to C891f with ipsec-tunnels
> and found a (even in show run all) not configured crypto-map
> called NiStTeSt1 :
> 
> That are Cisco C891F-K9 (revision 1.0) devices
> running c800-universalk9-mz.SPA.154-3.M6a.bin
> 
> ursamajor#sh crypto map
>        Interfaces using crypto map NiStTeSt1:
> 
> Crypto Map IPv4 "xxxxx" 100 ipsec-isakmp 
> [...]
> 
> ursamajor#conf t
> no crypto map NiStTeSt1
> end
> ursamajor#sh crypto map
> Crypto Map IPv4 "xxxxx" 100 ipsec-isakmp 
> [...]
> 
> Ok that seems to work, now I have to ask for timeslot 
> To reload (after a wr mem) to see weather it re-appears...
> 
> Very strange.
> Any experience with this ?
> An other Back-Door ?
> 
> Thank you for some insights,
> 
> Juergen.
> 
> 
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/