Whether supporting IPsec VPN or not on 1941/K9

[Soon Kwan Kwon]

Hi all,

I have 2 CISCO1941 routers.

I want to set IPsec VPN on this router.

I searched it through CISCO navigator, but the IOS I have is not supporting IPsec VPN.

I'll show you my routers version & license UDI.

After seeing below contents, please give me a hand as possible or not.

The point I have a question is "If I upgrade from 15.1M to 15.1T, is it possible supporting IPsec VPN?"

Thank you.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

First Router)

Router#show version
Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.1(4)M4, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2012 by Cisco Systems, Inc.
Compiled Tue 20-Mar-12 17:58 by prod_rel_team

ROM: System Bootstrap, Version 15.0(1r)M6, RELEASE SOFTWARE (fc1)

Router uptime is 40 minutes
System returned to ROM by power-on
System restarted at 01:02:48 UTC Wed Sep 30 2015
System image file is "flash0:c1900-universalk9-mz.SPA.151-4.M4.bin"
Last reload type: Normal Reload

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco CISCO1941/K9 (revision 1.0) with 491520K/32768K bytes of memory.
Processor board ID xxxxxxxx
2 Gigabit Ethernet interfaces
1 terminal line
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity disabled.
255K bytes of non-volatile configuration memory.
255744K bytes of ATA System CompactFlash 0 (Read/Write)

License Info:

License UDI:

-------------------------------------------------
Device#   PID                   SN
-------------------------------------------------
*0        CISCO1941/K9          xxxxxxxx

Technology Package License Information for Module:'c1900'

-----------------------------------------------------------------
Technology    Technology-package           Technology-package
              Current       Type           Next reboot
------------------------------------------------------------------
ipbase        ipbasek9      None           ipbasek9
security      securityk9    Permanent      securityk9
data          datak9        RightToUse     datak9

Configuration register is 0x2102

Router#

Second Router)

Router#show ver
Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.1(4)M2, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Mon 26-Sep-11 16:19 by prod_rel_team

ROM: System Bootstrap, Version 15.0(1r)M6, RELEASE SOFTWARE (fc1)

Router uptime is 4 minutes
System returned to ROM by power-on
System restarted at 01:29:41 UTC Wed Sep 30 2015
System image file is "flash0:c1900-universalk9-mz.SPA.151-4.M2.bin"
Last reload type: Normal Reload

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco CISCO1941/K9 (revision 1.0) with 491520K/32768K bytes of memory.
Processor board ID xxxxxxxx
2 Gigabit Ethernet interfaces
1 terminal line
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity disabled.
255K bytes of non-volatile configuration memory.
255744K bytes of ATA System CompactFlash 0 (Read/Write)

License Info:

License UDI:

-------------------------------------------------
Device#   PID                   SN
-------------------------------------------------
*0        CISCO1941/K9          xxxxxxxx

Technology Package License Information for Module:'c1900'

-----------------------------------------------------------------
Technology    Technology-package           Technology-package
              Current       Type           Next reboot
------------------------------------------------------------------
ipbase        ipbasek9      None           ipbasek9
security      securityk9    Permanent      securityk9
data          datak9        EvalRightToUse datak9

Configuration register is 0x2102

[Seb Rupik]

Hi there,

You need to enable the securityk9 license on both routers:

!
enable
conf t
license boot module c1900 technology-package securityk9
exit
reload
!

http://www.cisco.com/c/en/us/td/docs/routers/access/sw_activation/SA_on_ISR.html

cheers,

Seb.

[Soon Kwan Kwon]

Thank you sir.

You mean that if I configure it following your opinion, can I use IPsec VPN, right?

Regards,

[Seb Rupik]

Yes. Check table 2 'Embedded IPSec VPN Hardware Acceleration' :

http://www.cisco.com/c/en/us/products/collateral/routers/1900-series-integrated-services-routers-isr/data_sheet_c78_556319.html

cheers,

Seb.

[Soon Kwan Kwon]

Thank you very much!! ^^

Have a good day!~!

[Soon Kwan Kwon]

One more time..!

If I upgrade from 15.1M to 15.1T, is it possible supporting IPsec VPN????

[Seb Rupik · Accepted solution]

According to the feature navigator the earliest releases supporting IPSec VTI are:

15.1(4)M 

15.1(1)T

cheers,

Seb.

[iswift · Accepted solution]

Hi Seb

According to Soon's output above, there is already a valid permanent securityk9 license;

Technology    Technology-package           Technology-package
              Current       Type           Next reboot
------------------------------------------------------------------

security      securityk9    Permanent      securityk9

I don't believe there is anything that needs to be done on that front.

Ian