DH Group 14 on cisco 892 router

[jomo frank]

Hello Expert,

I using a 892 router and would like to create  site to site vpn using DH group 14

but this not displayed as an option only DH group 5 is visible.

Is DH group 14 support o the model router and if it is how to enable same.

Regards

Jomo

[Georg Pauwen]

Hello,

the 892 router is end of sale/end of life as of 2014. DH group 5 is the highest you can configure, as there are no more software updates available for this platform.

[balaji.bandi · Accepted solution]

what is the full model of the device, What kind of License and what is the IOS code running the device, as per 15.7 MT it does support DH 14 (bear in mind other side  should have the same capabilities to peer with VPN)

[Georg Pauwen]

Ouch...my bad, the EoL/EoS only affects the CISCO892J-K9...

[jomo frank]

Hello Balaji.bandi,

The information requested

Amazonia_Mall#sh ver
Cisco IOS Software, C800 Software (C800-UNIVERSALK9-M), Version 15.3(3)M5, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2015 by Cisco Systems, Inc.
Compiled Wed 04-Feb-15 11:24 by prod_rel_team

ROM: System Bootstrap, Version 15.2(3r)XC, RELEASE SOFTWARE (fc1)

Amazonia_Mall uptime is 3 weeks, 6 days, 23 hours, 59 minutes
System returned to ROM by reload at 07:58:06 Caracas Thu Feb 25 2021
System image file is "flash:c800-universalk9-mz.SPA.153-3.M5.bin"

Regards

Jomo

[Georg Pauwen · Accepted solution]

Hello,

as stated by Balaji, you need to upgrade to either one of the recommended releases, both of which support DH group 14 (and higher):

Release 15.6.3M6a MD
Release 15.7.3M4a MD

[jomo frank]

Hello Georg,

Thanks for the response. will update same.

Regards