"ip tcp intercept" is not available on Cisco 3925 router?

[SIMMN]

Not sure if I posted this in correct section.

I am trying to configure tcp intercept but just found ip tcp intercept is not an acceptable command on my 3925 running c3900-universalk9-mz.SPA.151-4.M2.bin.

Cisco feature navigator says that IOS has the feature plus it is not some complex feature either. Why I can not configure it? I probabaly missed something...

[Karsten Iwen · Accepted solution]

For TCP intercept you need the DATA-license on your router. You probably don't have that:

http://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/software-activation-on-integrated-services-routers-isr/white_paper_c11_556985.html#wp9000807

[SIMMN]

u are right!!!!

I guess the guy before me did not bother to buy extra license...

[Karsten Iwen]

I think Cisco classifies this as a provider-feature. And they have to buy DATA ... At least thats what Cisco want's them to do ... 

In my opinion, it should be better in the SEC license. but I'm not the one who gets asked for a decision like that ... ;-)