Cannot setup multiple site-site vpn's on 501

[bobfinke]

I can setup one vpn site to site tunnel from a pix 501 but when I go to set up another I get a message "Warning this crypto map is incomplete. I can reverse the order of the tunnels and the first one will work but the secound always fails. Please advise.

[slmansfield]

Without seeing your configuration, is it possible you are missing either the IPSEC peer statement or the access list defining the encrypted traffic?

Here is the chapter on CCO regarding configuration of the PIX with IPSEC. HTH

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/ipsecint.pdf

[bobfinke]

No, they are both there. This seems to be a bug in the PDM software. The error was reported by the VPN Wizzard and would not connect the secound VPN. Later I noticed that the tunnel was established. This was after a reboot. The configuration as observed with the sh ru command showed no difference. I have not had the opertunity to recreate the problem.