Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

basic q:2-crypto maps on the same interface-dynamic

hello,

at the moment, i have a crypto-map configured on my outside interface,

where my vpns are defined with each sequence number...

crypto map x ...

crypto map x interface outside

now i want to configure pix for vpn_client

so i create a dynamic-map

crpyo dynamic-map y

and apply it with crypto map interface outside

will this one work ...

as far as i know you can apply only one crypto-map per interface...

Best Regards

5 REPLIES
New Member

Re: basic q:2-crypto maps on the same interface-dynamic

You apply the dynamic map to the crypto map with a command like:

crypto map map-name 100 ipsec-isakmp dynamic dynamic-map

You can only apply one crypto map to an interface.

New Member

Re: basic q:2-crypto maps on the same interface-dynamic

what i want to ask is, shortly

can i assign a crypto map (i.e. for site to site vpn) and a dynamic crypto map on the same interface?

TIA

New Member

Re: basic q:2-crypto maps on the same interface-dynamic

yes you can apply both the site-to-site VPN and a remote VPN map to an interface. They have to have the same crypto map id.

For example:

crypto dynamic-map remote 20 set transform-set vpn3-set

crypto map vpn-map 20 ipsec-isakmp

crypto map vpn-map 20 match address 101

crypto map vpn-map 20 set peer xx.xx.xx.xx

crypto map vpn-map 20 set transform-set vpn3-set

crypto map vpn-map 100 ipsec-isakmp dynamic remote

crypto map vpn-map interface outside

Enjoy

New Member

Re: basic q:2-crypto maps on the same interface-dynamic

in your example,

how is the dynamic map applied to the interface,

with

crypto map vpn-map interface outside...

where as your dynamic map name is remote??

New Member

Re: basic q:2-crypto maps on the same interface-dynamic

yes exactly!! Sorry about leaving that out.

119
Views
0
Helpful
5
Replies