Symptom

Crypto uses old Virtual IP only and because of that it is not able to fetch the correct router state (Active/Standby) and SA request may get triggered on Standby router as well.

Conditions

Crypto with HA configurations. Then change the Virtual IP after the crypto is already applied.

Workaround

Remove crypto map first and then change the Virtual IP

Further Problem Description