Showing results for 
Search instead for 
Did you mean: 

asr 1000 IPsec tunnel not encrypting

Level 1
Level 1

Hi team,

We have an ASR 1000 brand new that came with an advanced enterprise license.

After configuring an IPsec tunnel, we see that the encryption does not come up and when execute the show license all command the IPsec license seems like installed but not in use.

I had read a guide for installing the licenses on the ASR router, but does not say anything about how to (if is necessary) activate the different features on the device.

asr1000# show version

Cisco IOS Software, IOS-XE Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 1 5.1(3)S2, RELEASE SOFTWARE (fc1) Technical Support: Copyright (c) 1986-2011 by Cisco Systems, Inc.

Compiled Mon 12-Dec-11 16:02 by mcpre

Cisco IOS-XE software, Copyright (c) 2005-2011 by cisco Systems, Inc.

All rights reserved.  Certain components of Cisco IOS-XE software are licensed under the GNU General Public License ("GPL") Version 2.0.  The software code licensed under GPL Version 2.0 is free software that comes with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such GPL code under the terms of GPL Version 2.0.  For more details, see the documentation or "License Notice" file accompanying the IOS-XE software, or the applicable URL provided on the flyer accompanying the IOS-XE software.


CFA.Peron.646.Spoke uptime is 3 weeks, 2 days, 6 hours, 2 minutes Uptime for this control processor is 3 weeks, 2 days, 6 hours, 3 minutes System returned to ROM by reload System image file is "bootflash:/asr1001-universalk9.03.04.02.S.151-3.S2.bin"

Last reload reason: PowerOn

This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

If you require further assistance please contact us by sending email to

License Info:

License UDI:

Device# PID                     SN                      UDI


*0      ASR1001                 JAE16470XXX             ASR1001:JAE16470XXX

License Package Information for Module:'asr1001'

Module name   Image level          Pri   Config Valid license


asr1001       adventerprise        1     NO     adventerprise

              advipservices        2     YES    advipservices

              ipbase               3     NO     ipbase

Module name   Current Level        Reboot Level


asr1001       adventerprise        adventerprise

cisco ASR1001 (1RU) processor with 1188947K/6147K bytes of memory.

4 Gigabit Ethernet interfaces

32768K bytes of non-volatile configuration memory.

4194304K bytes of physical memory.

7741439K bytes of eUSB flash at bootflash:.

Configuration register is 0x2102

asr1000# show license all

License Store: Primary License Storage

StoreIndex:  0  Feature: adventerprise                     Version: 1.0

        License Type: Permanent

        License State: Active, In Use

        License Count: Non-Counted

        License Priority: Medium

License Store: Primary License Storage

StoreIndex:  1  Feature: ipsec                             Version: 1.0

        License Type: Permanent

        License State: Active, Not in Use

        License Count: Non-Counted

        License Priority: Medium

I also checked the complete command line guide for IOS-XE looking for commands referring to feature activation but did not found anything.

Same for the IPsec VPN configuration guide and configuration guide for IOS-XE.

Anyone can help me on this??

Regards, Pedro.

0 Replies 0