* The Policy number should less then any crypto map with "dynamic DYNMAP" in use * Make sure to check for sysopt being enabled
* Does not include the access-lists or NONAT