cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
795
Views
5
Helpful
2
Replies

Enable crypto ikev2 on C1116-4PW Router

Joy3
Level 1
Level 1

Hi,

Could anyone know how to enable the 'crypto ikev2' on ISRs? The only alternatives are:

R1(config)#crypto ?
RSA-key-pair RSA key pair
key Long term key operations
pki Public Key components
provisioning Secure Device Provisioning
wui Crypto HTTP configuration interfaces

However, I would like the following config:

crypto ikev2 keyring DMVPN-KEYRING-1
peer ANY
address 0.0.0.0 0.0.0.0

Thanks.

1 Accepted Solution

Accepted Solutions

Hello,

 

you need to run a security license (which apparently is not running/activated, since you seem to have only the SSH encryption options).

 

Post the output of:

 

sh lic

 

and check for a line similar to the one below in your configuration:

 

license accept end user agreement
license boot level securityk9 <-- this is the security license

View solution in original post

2 Replies 2

Hello,

 

you need to run a security license (which apparently is not running/activated, since you seem to have only the SSH encryption options).

 

Post the output of:

 

sh lic

 

and check for a line similar to the one below in your configuration:

 

license accept end user agreement
license boot level securityk9 <-- this is the security license

Joy3
Level 1
Level 1

@Georg Pauwen Thanks very much for the tip. That has solved the problem. However, in a different ISR, I have loaded the configs using USB and that was successful. However, when I save and try to reload the router, I get the prompt below and I am not able to reload regardless of whether I enter 'yes' or 'no':

R1#rel

System configuration has been modified. Save? [yes/no]: y
Building configuration...

[OK]
% Unfortunately EULA is not detected for following feature/features:
% securityk9
% Please configure 'license accept end user agreement' and
% use 'write' command to ensure license configurations take effect
% Continue reload will cause functionality loss for above feature/features.

Continue to reload? (yes/[no]):

The licenses are:

Index 1 Feature: appxk9
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Active, Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None
Index 2 Feature: securityk9
Period left: Life time
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium
Index 3 Feature: ipbasek9
Period left: Life time
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium
Index 4 Feature: FoundationSuiteK9
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Active, Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None
Index 5 Feature: hseck9
Index 6 Feature: throughput
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Active, Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None
Index 7 Feature: internal_service

I would appreciate any help. Thanks

Review Cisco Networking products for a $25 gift card