Cisco PIX Beginner "crypto map" Question

[explosivo]

What is the policy numbering system for the crypto map portion of a PIX config??

Can I use single digits or a non-multiple of 10?????

crypto map outside_map 20 ipsec-isakmp
crypto map outside_map 20 match address vpn1
crypto map outside_map 20 set peer x.x.x.x
crypto map outside_map 20 set transform-set ESP-3DES-SHA


EXAMPLE:

crypto map outside_map 7 ipsec-isakmp
crypto map outside_map 7 match address vpn2
crypto map outside_map 7 set peer x.x.x.x.
crypto map outside_map 7 set transform-set ESP-3DES-SHA

crypto map outside_map 10 ipsec-isakmp
crypto map outside_map 10 match address vpn3
crypto map outside_map 10 set peer x.x.x.x
crypto map outside_map 10 set transform-set ESP-3DES-SHA

Thanks!

 

[KiscoKid]

Hi

You can use any number you want for your crypto map. And you can use single digits or double digits - whatever you want.

Hope this helps

 

[NetworkGhost]

Crypto map sequence numbers are for prioritization. When you have multiple sequence numbers within a map the map entry with the lowest number will be given the highest priority and will be used first.