crypto map dyn-map 20 ipsec-isakmp dynamic cisco--what does it do?

[Panther007]

Hi,
I was wondering if someone could tell me exactly what the function of line 3 below is:

1.crypto ipsec transform-set myset esp-des esp-md5-hmac
2.crypto dynamic-map cisco 1 set transform-set myset
3.crypto map dyn-map 20 ipsec-isakmp dynamic cisco

Thanks

 

[yizhar]

HI.

As far as I can understand, it creates a "crypto map" named dyn-map, and the other VPN tunnel endpoint of this map is a dynamic map called cisco and definde in line #2 in your question.

"dyn-map" and "cisco" are tags in this case.

dynamic maps are used to establish IPSec with hosts that you can't configure their IP address in advance, normaly because they are dial-up VPN clients.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar