Adding a 2 VPN on PIX 501

[fgarcia]

Hi there..i'm newbie in this cisco stuff..

i'm trying to setup multiple VPNs on a Cisco PIX 501 firewall with Linksys BEFVP41 routers..

Since not very familiar with the CLI, i'm using the PDM utility and it was very easy for the first one..unfortunately i'm receiving this error when i try to add the second VPN using the VPN Wizard:

(ERR)crypto map outside_map set peer 200.20.10.3

WARNING: This crypto map is incomplete

To remedy the situation add a peer and a valid access-list to this crypto map

[sachinraja]

Hi garcia

You need to first create an ACL for interesting traffic and later bind this to the crypto map.. you also need to set the peer address on the crypto map instance.. without these two parameters, the crypto map is empty and wont work..

the configs are added through the PDM only after these entries are defined...

there is no other problem with ur config.. just add these entries and u will be able to store it on the pix...

if you require the CLI , let me know, i will give you the commands...

Raj

[fgarcia]

Thanks Raj..i think i got the point now..

Could you send me which cli commands i need to bind the crypto map?...one more question: is the same crypto map for all VPNS or each VPN needs thier own crypto map?

Thanks a loto for you help

[sachinraja · Accepted solution]

hi garcia

for each vpn/peer you need a seperate instance of crypto map.. the map will have the same name, but different sequence numbers.. only one crypto map can be assigned to an interface, but u can have many instance of maps inside the major one...

for configuration, you can go through the URL given below..it has all config details about IPSEC:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/ipsecint.htm

hope this helps.. all the best.. rate replies if found useful....

Raj