Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

I can't add multiple crypto map seq numbers?????

I currently have my pix setup for VPN, I want to add an ipsec tunnel to another pix. When I try and add the "crypto map newmap 10 ipsec-isakmp", I lose ALL connections through my firewall. When I add "crypto map newmap 30 ipsec-isakmp" the pix takes it, but it doesn't show up when I do "sh tech". Any ideas? If you need more info please let me know(I attached part of my config.)


crypto ipsec transform-set myset esp-des esp-md5-hmac

crypto dynamic-map dynmap 30 set transform-set myset

crypto map newmap 20 ipsec-isakmp dynamic dynmap

crypto map newmap interface outside

isakmp enable outside

New Member

Re: I can't add multiple crypto map seq numbers?????

You need to unbind the crypto map entry from the interface first.

no crypto map newmap interface outside

then add all the statements for the new vpn tunnel you are creating.

Finally rebind the crypto map to the interface.