cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1075
Views
0
Helpful
2
Replies

Crypto map incomplete

servnj
Level 1
Level 1

I have PIX 515 and trying to add a gateway to gateway VPN tunnel with dynamic IP. I already have two other VPN tunnels configured with static IP. I enter the access-list 110 than the crypto map mymap 20 ipsec-isakmp no problem. than the crypto map mymap 20 match address 101 I get error message Crypto map incomplete. Why am I getting this error and how do I get around it. Thanks.

2 Replies 2

Kamal Malhotra
Cisco Employee
Cisco Employee

Hi,

When we configure a crypto map, till the time all the parameters are not configured, we get this message. So please do a sh run and if you see any '!Incomplete' message in the crypto map then its a matter of concern else not.

HTH,

Please rate if it helps,

Regards,

Kamal

Yes I have an Incomplete.

crypto ipsec transform-set tr-set esp-des esp-md5-hmac

crypto dynamic-map dynmap 10 set transform-set tr-set

crypto dynamic-map dynmap 15 set transform-set tr-set

crypto dynamic-map dynmap 15 set security-association lifetime seconds 3600 kilo

bytes 4608000

crypto map mymap 10 ipsec-isakmp

crypto map mymap 10 match address 101

crypto map mymap 10 set peer 70.106.123.11

crypto map mymap 10 set transform-set tr-set

crypto map mymap 15 ipsec-isakmp

crypto map mymap 15 match address 105

crypto map mymap 15 set peer 67.100.146.217

crypto map mymap 15 set transform-set tr-set

crypto map mymap 20 ipsec-isakmp

! Incomplete

crypto map mymap 6335 ipsec-isakmp dynamic dynmap

crypto map mymap interface outside

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: