3DES

[rodnei.magalhaes]

Hi!

I have a Cisco 2610XM router and the 3DES encryption is not enabled.

How can I implement this function in my router?

Thanks.

[gaurav_saxena]

You just need to upgrade the IOS of your router which support 3DES encrption.

[rodnei.magalhaes]

Thank you for your reply, but I have one more doubt.

My router´s IOS version is 12.3 (6c). Is there a specific version that I have to upgrade?

Rodnei

[Richard Burts]

Rodnei

It is not only a question of which version (12.3(6c)). It is more a question of which feature set. If you run the IP only, or IP Plus, or feature sets like that they do not have 3DES support. You need a feature set within 12.3(6c) like Advanced Security, or Enterprise Plus IPSEC 3DES to get support for 3DES.

HTH

Rick

[rodnei.magalhaes]

Rick,

Thank you for your reply. I am using IP only and I will check for a software with a 3DES support.

Rodnei

[thisisshanky]

You will need an IPSEC feature set supported IOS (costs $$ unless you have smartnet on the router).

You can offload 3DES encryption (optionally) to a AIM card (dedicated h/w for encryption).

[rodnei.magalhaes]

Thisisshanky,

You are right about the IPSec feature and the AIM. For the Cisco 2610XM, the AIM-VPN/BPII has 3DES feature and this router has one slot to install it.

Thank you.

Rodnei

[supreme.nkosi]

Upgrade the IOS image on your router

[rodnei.magalhaes]

Ok.

Thank you for your reply.

Rodnei

[jteixido]

Rodnei,

I applogize for the useless answers that you have received from the group thus far. To run 3DES on your router you will need the following:

S26ASK9-12314T USD 1,000.00

Cisco 2600 IOS ADVANCED SECURITY

Yes the cost is $1,000.00 for the IOS that contains 3DES. There are other feature sets that also contain 3DES, but this was the most cost effective feature set that I found.

I personally like to install T trains, because T trains becomes mainline in the next major release. This allows you to have some added features. I would do a complete bug sweep before installing any IOS.

I hope this helps,

John...

[rodnei.magalhaes]

John,

You are right about the S26ASK9 IOS version. I have found a document at Cisco web site (http://www.cisco.com/en/US/products/hw/routers/ps259/prod_bulletin0900aecd802a945e.html) and I am considering your suggestion. Thisisshanky´s suggestion is another way to implement 3DES feature (using AIM-VPN/BPII module).

Thank your for your help.

Rodnei

[thisisshanky]

Rodnei,

Even if you use the AIM-VPN, you still need the IOS with IPSEC/3DES support (ADVANCED SECURITY IOS)to make it to work. AIM is not required for VPN to work. Just that it improves performance.

[rodnei.magalhaes]

Thisisshanky,

I have supposed that the IPSec 3DES feature was available in AIM module without the necessity of IOS upgrade.

Thank you one more time.

Rodnei