I have found that a good practice is to number the remote access like this "65353.65535", that will make sure that your dynamic entry is the very last possible and shouldn't interfere with the static entries.
Thank you, James On Fri, Dec 16, 2011 at 9:38 AM, Kingsley Charles < [email protected]> wrote: > Yes that is how you should do. Dynamic maps should be always at the last. > > With regards > Kings > > > On Fri, Dec 16, 2011 at 3:53 PM, waleed ' <[email protected]> wrote: > >> yes dear , I know this but what I notice if we put the dynamic entry >> before the static we will have problem on the incoming vpn connection >> becuase the incoming will land on the dynamic becuase it come first , so we >> have to put l2l entries before >> >> >> ------------------------------ >> From: [email protected] >> To: [email protected]; [email protected] >> Subject: RE: [OSL | CCIE_Security] Crypto map place >> Date: Fri, 16 Dec 2011 15:09:15 +0500 >> >> >> >> Let say we have 2 crypto maps and 1 WAN interface where we need to apply >> that . We only can apply 1 crypto map name thats where the sequence number >> comes in , name would be same but sequence would be 10 and 20 . Apply the >> name to interface and it works . >> >> ------------------------------ >> From: [email protected] >> To: [email protected] >> Date: Fri, 16 Dec 2011 09:17:00 +0000 >> Subject: [OSL | CCIE_Security] Crypto map place >> >> is there meaning for arrangement if crypto map entries , I mean for >> example if we have crypto map 10 which implement dynamic crypto map and >> crypto map 20 which is l2l crypto map entry >> >> _______________________________________________ For more information >> regarding industry leading CCIE Lab training, please visit >> www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out >> www.PlatinumPlacement.com >> >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> Are you a CCNP or CCIE and looking for a job? Check out >> www.PlatinumPlacement.com >> > > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
