ISR 900 L2TP VPN remote access

[T0mTheCat]

Hi, 

I am trying to setup a configuration for remote access VPN

I am unable to use router#(config)crypto isakmp

I only got below instead

R1#crypto ?
key Key related commands.
pki Public Key components

https://learningnetwork.cisco.com/s/question/0D53i00000Kstcg/no-crypto-isakmp-or-ipsec-command-available

above user Senor_Rabbs mention that can be enable below

You can try:

Router(config)#license boot module c2900 technology-package securityk9

after you save and reboot

************************************************************************************

my router version

Device# PID SN
-------------------------------------------------
*1 C921-4P XXXXXXX

Technology Package License Information for Module:'c900'

------------------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------------
ipbase ipbasek9 Permanent ipbasek9
security None None None
appx None None None

Configuration register is 0x2102

************************************************************************************

anyone can advise me? or there is other method do this please let me know

much appreciated! =D

[Georg Pauwen · Accepted solution]

Hello,

which IOS version are you running ? I think the right to use licensing is limited to some lower 15.x versions.

Did you accept the end user agreement ?

ISR900(config)# license accept end user agreement

I assume after entering the command 'license boot module c2900 technology-package securityk9' you did reboot the router ? What is the output of:

sh lic

[T0mTheCat]

Hi Georg,

Indeed, after activating "R1(config)#license boot module c900 technology-package securityk9"

I can now get router#(config)crypto isakmp

Thank you for your help!

Index 1 Feature: ipbasek9
Period left: Life time
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium
Index 2 Feature: securityk9
Period left: 8 weeks 3 days
Period Used: 1 minute 0 second
License Type: EvalRightToUse
License State: Active, In Use
License Count: Non-Counted
License Priority: Low

[T0mTheCat]

hello Georg! =D

I am using version 15.8

I bought this from a authorized retailer, I have yet to accept the ISR900(config)# license accept end user agreement

does it mean accepting the agreement requires to pay additional?

I have not change the 'license boot module c2900 technology-package securityk9', will it make me pay additional?

R1#show license
Index 1 Feature: ipbasek9
Period left: Life time
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium
Index 2 Feature: securityk9
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Active, Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None
Index 3 Feature: appxk9
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Active, Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None
Index 4 Feature: LI
Index 5 Feature: ios-ips-update
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Active, Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None
Index 6 Feature: SNASw
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Active, Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None
Index 7 Feature: mgmt-plug-and-play
Index 8 Feature: mgmt-lifecycle
Index 9 Feature: mgmt-assurance
Index 10 Feature: mgmt-onplus
Index 11 Feature: mgmt-compliance

Thank you and much appreciate your reply! =D

[balaji.bandi · Accepted solution]

You have only base License, you can activate  right to use License, but for Long run you need permanant License for Security.

https://www.cisco.com/c/en/us/td/docs/routers/access/sw_activation/SA_on_ISR.html#pgfId-1204189

[T0mTheCat]

Hi Balaji,

Do you know what is the cost like?

Thank you! =D

[balaji.bandi]

its depends on where you located., look at CDW.com ( long back got it for customer around 500$ basic one)

[T0mTheCat]

Hi, I apologize for the late reply, I have not got the chance to try yet, will update once I manage to update the setting.

May I know if after I change to 'license boot module c2900 technology-package securityk9' and accept the agreement is it possible to revert back to previous state?  or only the additional function will just stop working but the other configuration will kept working?

Much appreciate your help! =D

[balaji.bandi]

Once the usage over Perpetual License will be taken care of and working as expected as a base feature, additional License feature no Longer works as per technical.