What on earth is this? I didn't type those crypto commands!!

Apr 05, 2005 1 Replies

Hi,



I've got a pair of 3845s running 12.3(14)T. When they reload, the following appears in the log:



R3845-1#sh logg | i PARSER



000022: *Apr 5 13:15:31.515 BST: %PARSER-5-CFGLOG_LOGGEDCMD: User:console logged command:access-list 199 permit icmp host
10.10.10.10 host 20.20.20.20
000023: *
Apr 5 13:15:31.515 BST: %PARSER-5-CFGLOG_LOGGEDCMD: User:console logged command:crypto map NiStTeSt1 10 ipsec-manual
000024: *Apr 5 13:15:31.515 BST: %PARSER-5-CFGLOG_LOGGEDCMD: User:console logged command:match address 199
000025: *
Apr 5 13:15:31.515 BST: %PARSER-5-CFGLOG_LOGGEDCMD: User:console logged command:set peer 20.20.20.20
000026: *Apr 5 13:15:31.519 BST: %PARSER-5-CFGLOG_LOGGEDCMD: User:console logged command:exit
000030: *
Apr 5 13:15:31.887 BST: %PARSER-5-CFGLOG_LOGGEDCMD: User:console logged command:no access-list 199
000031: *Apr 5 13:15:31.891 BST: %PARSER-5-CFGLOG_LOGGEDCMD: User:console logged command:no crypto map NiStTeSt1

Needless to say, none of this is in my startup config, and I've never entered any of those commands in my life.



What's going on?



thanks, alec


Do you see this same behavior on both routers? Please send me the output of a "show log" and a "show tech" in txt format or post to this thread.

Thanks Anthony

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required