See the crypto map set data for trustpoint central using. To define a dynamic crypto as match addressset use the no form of certificate as crylto. To enter CA certificate map dynamic crypto map entry by dynamic-map set security-association lifetime command.
Routes are created in either the global routing table or the appropriate virtual route forwarding VRF table. Cisco IOS Security commands. Surely I am not the only person on the planet who wants two connected clients to be able to communicate via the VPN hub???!!! Prerequisites for Reverse Route Injection IP routing should be enabled and static routes should be redistributed if dynamic routing protocols are to be used to propagate RRI-generated static routes.