Symptom

1) "crypto isakmp aggressive-mode disable" is in "show run all" by default. In spite of the disable command, IKE aggressive mode is enabled by default. 2) The command remains in "show run all" output. "no crypto isakmp aggressive-mode disable" command cannot remove it from "show run all", and that change ("no" form) does not show up in "show run" output. The command works properly if it is configured explicitly.

Conditions

Cisco IOS 15.1 or later

Workaround

- See "show run" output to check if this feature is disabled or not. - To disable IKE aggressive mode, set "crypto isakmp aggressive-mode disable" explicitly.

Further Problem Description