Crypto Map configuration is not supported on the given interface

[Brad303]

I'm trying to set up a VPN on a 6506-E running 12.2(33)SXJ10, but I'm getting this error:

6506(config)#int gi5/1
6506(config-if)#crypto map REMOTE_VPN
ERROR: Crypto Map configuration is not supported on the given interface
6506(config-if)#

Is this a configuration issue, or hardware limitation?

[Torbjørn]

I believe that is caused by a hardware limitation for the Gi5 line card. Which line card is it?

[MHM Cisco World]

This interface is L3 ?

The crypto only run under l3 interface not l2.

MHM

[Brad303]

Thanks for the suggestions.

This unit has two WS-X6748-GE-TX cards.

The Gi5/1 interface has an IP assigned (plus a secondary, actually), so it's L3.

I was able to add the crypto map to a VLAN, but I don't know if that tells us anything.

I did find this:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/release/notes/ol_14271/features.html

IPsec Network Security

Note

• The SPA-IPSEC-2G supports IPsec Network Security in hardware
• Without a SPA-IPSEC-2G, the IPsec Network Security feature (configured with the crypto ipsec command) is supported in software only for administrative connections to Catalyst 6500 series switches.

I don't see a SPA-IPSEC-2G in my modules. Is that my issue?