ASR 1001 X- Crypto Issue

[Yeshwanth Simhadri]

Hello All,

Crypto feature is not coming up on the ASR... ON the data sheet its says that the feature is enable.. but its not coming up :(

Router#sh ver
Cisco IOS XE Software, Version 03.13.02.S - Extended Support Release
Cisco IOS Software, ASR1000 Software (X86_64_LINUX_IOSD-UNIVERSAL-M), Version 15.4(3)S2, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2015 by Cisco Systems, Inc.
Compiled Fri 30-Jan-15 14:23 by mcpre

Kindly Help,

Yeshwanth

[Iulian Vaideanu]

I believe you need the UNIVERSALK9 image for crypto...

[Yeshwanth Simhadri]

Downloaded the new ios for the K9 and checked the boot but the ASR is not picking it up

Router#sh run | sec boot
boot-start-marker
boot system flash asr1001x-universalk9.03.16.02.S.155-3.S2-ext.SPA.bin
boot-end-marker
license boot level adventerprise

IS there a command for same? kindly advise

[Iulian Vaideanu]

boot system flash bootflash:/asr1001x-universalk9.03.16.02.S.155-3.S2-ext.SPA.bin

[Yeshwanth Simhadri]

lulian thats not working mate - the crypto features are not coming up

[Iulian Vaideanu]

When you said that the ASR "is not picking up" the new image I assumed it was a boot issue...  just to clarify, what IOS image is the device currently running and what exactly is not comming up / cannot be configured?

[Yeshwanth Simhadri]

its not picking up the K9 image i believe

- it should n0t be a boot issue ..see below;

Router#sh run | sec boot
boot-start-marker
boot system flash asr1001x-universalk9.03.16.02.S.155-3.S2-ext.SPA.bin

The crypto features are not coming up.. check below

Router#dir
Directory of bootflash:/

   11  drwx            16384   Oct 3 2015 05:05:37 +00:00  lost+found
507905  drwx             4096   Jun 8 2016 22:37:07 +00:00  .prst_sync
   12  -rw-        482060536   Oct 3 2015 05:08:14 +00:00  asr1001x-universal.03.13.02.S.154-3.S2-ext.SPA.bin
131073  drwx             4096   Oct 3 2015 05:09:22 +00:00  .installer
622593  drwx             4096  Jan 22 2016 04:44:50 +00:00  core
704513  drwx             4096   Oct 3 2015 05:36:26 +00:00  .rollback_timer
49153  -rw-                0   Oct 3 2015 05:36:34 +00:00  tracelogs.810
475137  drwx            20480   Jun 8 2016 22:42:06 +00:00  tracelogs
49154  -rw-        520582464   Jun 8 2016 21:26:43 +00:00  asr1001x-universalk9.03.16.02.S.155-3.S2-ext.SPA.bin
409601  drwx             4096  Jan 22 2016 04:44:19 +00:00  virtual-instance
81922  -rw-               30   Jun 8 2016 22:37:11 +00:00  throughput_monitor_params
81923  -rw-             1138  Apr 28 2016 22:00:13 +00:00  JAE1938056U_201604282206149000.lic
81924  -rw-             1144  Apr 28 2016 22:00:49 +00:00  JAE1938056U_201604282212059060.lic

[Yeshwanth Simhadri]

for some reason - its has started working working now

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

[mchance]

bootflash:asr1002x-universalk9.03.16.01a.S.155-3.S1a-ext.SPA.bin

That is the version you need, specifically the "universalk9" as lulian stated.

[Yeshwanth Simhadri]

did that no luck