RE: Site-to-Site and Remote Access VPN on PIX? [7:63100]

2003-02-15 Thread Mark W. Odette II
Look into Dynamic map configuration. It's an extension of the Crypto Map, as you can only apply one crypto map to the interface (outside). See CCO website for more details (search Google for dynmap and PIX, and you should find several examples). On CCO's site, do a search on Technical Tips on

RE: Site-to-Site and Remote Access VPN on PIX? [7:63100]

2003-02-15 Thread Albert Lu
Kim, It will work, I've done it before. It is true that you can only have 1 crypto map per interface, but you can have multiple ISAKMP/IPSEC policies for different tunnels in that crypto map. However, for dynamic crypto map used for remote access VPN, what happens is that the dynamic crypto map