Crypto command not working in cisco ASR 1006

[Sharanjeet_Kumar]

Hi team,

I am working on a ASR 1006 router, everything looks fine but our new requirement is to configure ipsec on this router, 

But, we are unable to run the command crypto, as it is saying unnidentified command

[MHM Cisco World]

Just active the k9 license 

MHM

[Sharanjeet_Kumar]

Can u please tell the command as I am not able to find out for ASR 1006 in google

[MHM Cisco World]

Show version 

Did you see ios xe version with or without k9?

MHM

[Sharanjeet_Kumar]

GZBCPCRTRCORP01#sh ver
Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.2(4)S, RELEASE SOFTWARE (fc4)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2012 by Cisco Systems, Inc.
Compiled Mon 23-Jul-12 19:01 by mcpre

IOS XE Version: 03.07.00.S

Cisco IOS-XE software, Copyright (c) 2005-2012 by cisco Systems, Inc.
All rights reserved. Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0. The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0. For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.

ROM: IOS-XE ROMMON

GZBCPCRTRCORP01 uptime is 9 minutes
Uptime for this control processor is 12 minutes
System returned to ROM by reload
System image file is "bootflash:/asr1000rp1-adventerprisek9.03.07.00.S.152-4.S.bin"
Last reload reason: PowerOn

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco ASR1006 (RP1) processor with 1685164K/6147K bytes of memory.
Processor board ID FOX1633G1W6
10 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
917503K bytes of eUSB flash at bootflash:.
39004543K bytes of SATA hard disk at harddisk:.

Configuration register is 0x2102

[MHM Cisco World]

Command

license accept end user agreement

Check this command and be sure before applying it' it allow you to active license for trail time.

Ypu need in end activate license permanent

MHM

[Richard Burts]

When the OP mentioned "unnidentified command" I wondered if perhaps the image they are running did not support crypto. So MHM was right to ask about k9. The output of show version "asr1000rp1-adventerprisek9.03.07.00.S.152-4.S.bin" clearly shows k9 so crypto is supported in this image. Would the OP go into config mode, enter crypto ?, and post the output?

[Giuseppe Larosa]

Hello @Sharanjeet_Kumar ,

what IOS XE version is running on your ASR 1006 ? 

in some 17.x version support for crypto map has been removed and you need to use statiC VTI instead.

Also check you licensing

Hope to help

Giuseppe