PIX and dynamic crypto map

[piccololean]

Hi guys! I've a big problem... my PIX 515E has the outside interface connected to the 172.17.x.x net with IP 172.17.16.163. On the inside interface there's a private net 10.0.0.x. I configured the PIX with IPSec support for a VPN with the PC 172.17.10.50 and it works fine. Now I need to change my conf to permit to every pc on the 172.17.x.x to enter the VPN... I've tried with dynamic crypto map but it didn't work. Can someone tell me what are the lines that I have to modify? Here's my conf: http://utenti.lycos.it/lean79/conf.txt

Thanks to all!

[ehirsel]

Will you be using the cisco vpn client on the PC? Or will you be using the IPSec code that comes with the OS, or someother client?

How was you dynamic crypto map defined? If you still had the the 10.50 peer defined in that map then it does not matter that the map is definec dynamic, only that 10.50 peer can connect. Normally dynamic maps are used when you do not know the peer beforehand. You could modify the isakmp key to only be used by the 172.17.x.x subnet instead of anyone, to insure that general internet hosts cannot try to connect to your pix via IPSec. You still should not define the set peer in the crypto map though.

Let me know if this helps and whether or not you need more help.