Thanks Mike I have come across this before also and found as a general rule I place my dynamic crypto maps at sequence number 65535 in the static crypto map in which they are nested.
I would also add that one must also be careful with with the 'set peer' statements they create in the static crypto map entries with preferences above the dynamic map (<65535) that they don't inadvertantly match peers that you actually intend to hit the dynamic map at the lower preference. I mucked around with this for a few hours once trying to work out the issue only to find my dynamic peer was actually accidently hitting a static crypto map entry and not the intended nested dynamic map. Ben
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
