Crypto map incomplete

[servnj]

I have PIX 515 and trying to add a gateway to gateway VPN tunnel with dynamic IP. I already have two other VPN tunnels configured with static IP. I enter the access-list 110 than the crypto map mymap 20 ipsec-isakmp no problem. than the crypto map mymap 20 match address 101 I get error message Crypto map incomplete. Why am I getting this error and how do I get around it. Thanks.

[Kamal Malhotra]

Hi,

When we configure a crypto map, till the time all the parameters are not configured, we get this message. So please do a sh run and if you see any '!Incomplete' message in the crypto map then its a matter of concern else not.

HTH,

Please rate if it helps,

Regards,

Kamal

[servnj]

Yes I have an Incomplete.

crypto ipsec transform-set tr-set esp-des esp-md5-hmac

crypto dynamic-map dynmap 10 set transform-set tr-set

crypto dynamic-map dynmap 15 set transform-set tr-set

crypto dynamic-map dynmap 15 set security-association lifetime seconds 3600 kilo

bytes 4608000

crypto map mymap 10 ipsec-isakmp

crypto map mymap 10 match address 101

crypto map mymap 10 set peer 70.106.123.11

crypto map mymap 10 set transform-set tr-set

crypto map mymap 15 ipsec-isakmp

crypto map mymap 15 match address 105

crypto map mymap 15 set peer 67.100.146.217

crypto map mymap 15 set transform-set tr-set

crypto map mymap 20 ipsec-isakmp

! Incomplete

crypto map mymap 6335 ipsec-isakmp dynamic dynmap

crypto map mymap interface outside