Cisco 500 Series, Configuration Manual

Page: 717 / 1140

32-7
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 32 Configuring Remote Access IPSec VPNs
Creating a Crypto Map Entry to Use the Dynamic Crypto Map
Creating a Crypto Map Entry to Use the Dynamic Crypto Map
Next create a crypto map entry that lets the security appliance use the dynamic crypto map to set the
parameters of IPSec security associations.
In the following examples for this command, the name of the crypto map is mymap, the sequence number
is 1, and the name of the dynamic crypto map is dyn1, which you created in the previous section,
“
Creating a Dynamic Crypto Map .” Enter these commands in global configuration mode.
Step 1
To create a crypto map entry that uses a dynamic crypto map, enter the crypto map command. The
syntax is crypto map map-name seq-num ipsec-isakmp dynamic dynamic-map-name.
hostname(config)#
crypto map mymap 1 ipsec-isakmp dynamic dyn1
hostname(config)#
Step 2
To apply the crypto map to the outside interface, enter the crypto map interface command.
The syntax is crypto map map-name interface interface-name
hostname(config)# crypto map mymap interface outside
hostname(config)#