Version change from start to run

[mrn]

Our 1700 series router was working fine until last night after a reboot.

Where we had

crypto map to_vpn 1 ipsec-isakmp
set peer 203.*.*.*
set transform-set to_vpn
match address 2000

now shows

crypto map to_vpn 1 ipsec-isakmp
! Incomplete
set peer 203.*.*.*
set transform-set to_vpn

When I do a show run, but appears to be correct on show start

I also notice that the version on running is 12.2 but on start is 12.3

Anybody seen this before?



Mike

"A foolproof method for sculpting an elephant: first, get a huge block of marble, then you chip away everything that doesn't look like an elephant."

http://www.airport-parking-site.co.uk/

 

[JOAMON]

Look for access-list 2000......it must be missing. That is why it is incomplete.

 

[mrn]

No access-list 2000 is there. If I try to put match address 2000, I'm told it's invalid. But if I move all the entries in access-list 2000 to access-list 118 and insert match address 118 it works .

What worries me more is the version mis-match start shows 12.3 & run shows 12.2

Was there a 3 digit limit for access-lists on version 12.2?

Mike

"A foolproof method for sculpting an elephant: first, get a huge block of marble, then you chip away everything that doesn't look like an elephant."

http://www.airport-parking-site.co.uk/

 

[mrn]

Just noticed the following

dir flash:
Directory of flash:/

1 -rw- 6484004 <no date> c1710-k9o3sy-mz.122-4.YA2.bin
3 -rw- 8419732 May 25 2004 17:22:21 c1710-k9o3sy-mz.123-5a.bin

How do I get the router to boot from 123-5a?

Mike

"A foolproof method for sculpting an elephant: first, get a huge block of marble, then you chip away everything that doesn't look like an elephant."

http://www.airport-parking-site.co.uk/

 

[vipergg]

You can either delete the old one out of flash that you don't need then it will find the newer one , it always takes the first one in flash if there is no boot statement or you can try and add a boot statement "boot system flash:c1710-k9o3sy-mz.123-5a.bin" . Write memory.

 

[JOAMON]

I would copy the old IOS to a TFTP server prior to deleting it. That way you have it should you ever need to put it back.

 

[mrn]

Thanks guys.

Mike

"A foolproof method for sculpting an elephant: first, get a huge block of marble, then you chip away everything that doesn't look like an elephant."

http://www.airport-parking-site.co.uk/