Can Cisco 2900 Router configure both IKE1 and IKE2 for different IPsec VPN tunnel

[Xiaojing Li]

Currently we are configuring Cisco 2900 router with IPsec tunnel to other Cisco 1900 router using IKE1, however, some of the site office only has Cisco ASA with IKE2 can support SHA2, so they request us to configure IKE2 on 2900.

My question is my 2900 is already configured some VPN tunnel using IKE1, can I just configure IKE2 for this new tunnel? 

[johnlloyd_13]

hi,

yes, your 2900 can do IKEv2 if you already have the security license installed.

Technology Package License Information for Module:'c2900'

-----------------------------------------------------------------
Technology    Technology-package           Technology-package
              Current       Type           Next reboot  
------------------------------------------------------------------
ipbase        ipbasek9      Permanent      ipbasek9
security      securityk9    Permanent      securityk9
uc            uck9          Permanent      uck9
data          None          None           None

2911(config)#crypto ?                
  call          Configure Crypto Call Admission Control
  ctcp          Configure cTCP encapsulation
  dynamic-map   Specify a dynamic crypto map template
  engine        Enter a crypto engine configurable menu
  gdoi          Configure GDOI policy
  identity      Enter a crypto identity list
  ikev2         Configure IKEv2 Options
  ipsec         Configure IPSEC policy
  isakmp        Configure ISAKMP policy
  key           Long term key operations
  keyring       Key ring commands
  logging       logging messages
  map           Enter a crypto map
  mib           Configure Crypto-related MIB Parameters
  pki           Public Key components
  provisioning  Secure Device Provisioning
  vpn           Configure crypto vpn commands
  wui           Crypto HTTP configuration interfaces
  xauth         X-Auth parameters