| 15.5 |  | Using PDM to Create Site-to-Site VPNs |
| 15.5.6 |  | Creating a crypto map |

| The Tunnel Policy window is used to create crypto maps. Tunnel policies are the equivalent of crypto maps in the PIX Security Appliance CLI. When a Tunnel Policy is selected from the IPSec branch of the Categories tree, the Tunnel Policy table appears, displaying the currently configured tunnels. It is then possible to add, edit, or delete policies by clicking the buttons on the right side of the screen.

Figure shows the window that appears when Add is clicked in the Tunnel Policy window. This is the window in which tunnel policies are defined or modified. As a tunnel policy is created, it is necessary to attach it to an interface. The PIX Security Appliance CLI enables an administrator to configure a crypto map and then apply it to an interface. PDM hides the concept of the crypto map. It does not support crypto maps that are not applied to any interface. If this type of a map exists in the configuration, PDM parses and ignores it. PDM also does not support crypto maps that are applied to more than one interface. This includes dynamic crypto maps.

A tunnel policy can have more than one transform set and more than one peer. This is the purpose of the Select the Multiple button beside the Transform Set field and the Advanced button beside the Peer IP Address field. Each opens a window where it is possible to configure multiple values per field.