VPN - "Cannot manipulate dynamically-created entry"

[jerry.roy]

Hi all,

I have a 7206 that won't accept the following command. I have confirmed it does not have this dynamic crypto-map with the "sh crypto dynamic-map"

When I try to add a new dynamic crypto-map I get this:

ptlgrh14(config)#crypto map ETH0 277 ipsec-isakmp dynamic 06141002

Cannot manipulate dynamically-created entry

Try to remove it:

ptlgrh14(config)#no crypto map ETH0 277

Cannot remove dynamically-created entry

Is there a limit? I have 250 sites on a 7206 and CPU is only at 20%

TIA

[owillins]

Looks like the dynamic crypto map that you are trying to add, might not be the correct entry. I guess there is a limit to the total amount of IPSec Tunnels that can be there on a router. But am not sure of the numbers.