L2L VPN, Cisco 3640 with IOS 12.3(16) no crypto

[netjess]

Greetings,

I have a Cisco 3640 router with IOS v.12.3(16)

It does not recognize the crypto commands.

What reading I have been able to find says that it should be there.

Any idea?

Thank you.

#sh version
Cisco Internetwork Operating System Software
IOS (tm) 3600 Software (C3640-I-M), Version 12.3(16), RELEASE SOFTWARE (fc4)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2005 by cisco Systems, Inc.
Compiled Tue 23-Aug-05 20:03 by ssearch
Image text-base: 0x60008B00, data-base: 0x60D36000

ROM: System Bootstrap, Version 11.1(20)AA2, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
ROM: 3600 Software (C3640-I-M), Version 12.3(16), RELEASE SOFTWARE (fc4)

router01 uptime is 3 hours, 43 minutes
System returned to ROM by power-on
System image file is "flash:c3640-i-mz.123-16.bin"

cisco 3640 (R4700) processor (revision 0x00) with 89088K/9216K bytes of memory.
Processor board ID 18209909
R4700 CPU at 100MHz, Implementation 33, Rev 1.0
Bridging software.
X.25 software, Version 3.0.0.
2 FastEthernet/IEEE 802.3 interface(s)
DRAM configuration is 64 bits wide with parity disabled.
125K bytes of non-volatile configuration memory.
32768K bytes of processor board System flash (Read/Write)

Configuration register is 0x2102

[mfurnival · Accepted solution]

That IOS image is not a crypto image:

System image file is "flash:c3640-i-mz.123-16.bin"

[netjess]

Thank you mfurnival

That is what I am finding out. Do you know if ther is a page that tells you what images have what. THe image name is pretty cryptic itself. Ths there a method to breakdown what an image has by the charachters in the name?

[mfurnival]

Try this - http://www.bdsltd.co.uk/network/cisco/naming.htm

You are looking for an image with a "K" in it for crypto stuff.

[Richard Burts · Accepted solution]

Actually images with K9 in the image name are indicating only that they have crypto support that will do RSA keys and SSH. It does not necessarily mean that the image will support VPN.

I am pretty sure that the image given by the OP is the IP Base image and it does not support VPN. Perhaps the best way to know what is supported in an image is to use the Feature Navigator from Cisco which has an option to research an image and will list the features supported in that image. This link will get you to the Feature Navigator

http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp

HTH

Rick

[netjess]

Thanks all.

It seems my router is too old for me to obtain, from Cisco, an image update unless I find someone with a valid image that would give me a copy.

http://www.cisco.com/en/US/products/hw/routers/ps274/prod_eol_notice09186a008032d840.html

I ended up using a different piece of hardware for now. PIX506E with v6.3. Yeah, it's old but I think it still has some life in it.