Symptom
show crypto isakmp profile doesn't show fmVRF for domain IKE identities:
Router(conf-isa-prof)#do show run | sec crypto isakmp profile
crypto isakmp profile test
match identity address 192.0.2.1 255.255.255.255 fvrf-test
match identity host test.test.com fvrf-test
match identity user-fqdn domain test.com fvrf-test
Router(conf-isa-prof)#do show crypto isakmp profile
IKEv1 PROFILE test
Ref Count = 1
Identities matched are:
ip-address 192.0.2.1 255.255.255.255 fvrf-test
domain test.test.com <--- fvrf missing
domain test.com <--- fvrf missing
Certificate maps matched are:
keyring(s):
trustpoint(s):
Conditions
IKEv1
ISAKMP match identity statement with identity type of "host" or "user-fqdn" and VRF match
Workaround
Check the running-config instead of "show crypto isakmp profile".
Further Problem Description
