ISAKMP

Clearing Crypto Map Configurations
Chapter 29
Configuring IPsec and ISAKMP
Table 29-6
Commands to Clear and Reinitialize IPsec SAs (continued)
Command
clear configure crypto map
clear configure crypto isakmp
clear configure crypto isakmp policy
clear crypto isakmp sa
Purpose
Removes all crypto maps. Includes keywords that let you
remove specific crypto maps.
Removes the entire ISAKMP configuration.
Removes all ISAKMP policies or a specific policy.
Removes the entire ISAKMP SA database.
Clearing Crypto Map Configurations
The clear configure crypto command includes arguments that let you remove elements of the crypto
configuration, including IPsec, crypto maps, dynamic crypto maps, CA trustpoints, all certificates,
certificate map configurations, and ISAKMP.
Be aware that if you enter the clear configure crypto command without arguments, you remove the
entire crypto configuration, including all certificates.
For more information, see the clear configure crypto command in the Cisco Security Appliance
Command Reference.
Supporting the Nokia VPN Client
The security appliance supports connections from Nokia VPN Clients on Nokia 92xx Communicator
series phones using the Challenge/Response for Authenticated Cryptographic Keys (CRACK) protocol.
CRACK is ideal for mobile IPsec-enabled clients that use legacy authentication techniques instead of
digital certificates. It provides mutual authentication when the client uses a legacy based secret-key
authentication technique such as RADIUS and the gateway uses public-key authentication.
The Nokia back-end services must be in place to support both Nokia clients and the CRACK protocol.
This requirement includes the Nokia Security Services Manager (NSSM) and Nokia databases as shown
in Figure 29-5.
29-28
Cisco Security Appliance Command Line Configuration Guide
OL-12172-04