Missing crypto ikev2 / ipsec command on C8200-1N-4T

[botezatu]

Hello,

We have just received an C8200-1N-4T router and, unfortunately, we cannot create an ipsec vpn as the crypto commands are not there:

hostname(config)#crypto ?
RSA-key-pair RSA key pair
key Long term key operations
pki Public Key components
provisioning Secure Device Provisioning
wui Crypto HTTP configuration interfaces

Is there something I'm missing?

Thanks,

George

[Georg Pauwen]

Hello,

I cheked the documentation, but since that is a rather new platform, I could not really find very detailed informatiion on which license you need for encryption. Looks like now you can onluy configure SSH.

What is the output of:

show lic

?

[botezatu]

Hi Georg and thanks for taking the time to look into this,

Below is the "show license all" output which, at least to me, does not seem to be showing any useful information:

HOSTNAME#sh license all
Smart Licensing Status
======================

Smart Licensing is ENABLED
License Reservation is ENABLED

License Conversion:
Automatic Conversion Enabled: False
Status: Not started

Export Authorization Key:
Features Authorized:
<none>

Utility:
Status: DISABLED

Smart Licensing Using Policy:
Status: ENABLED

Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED

Transport:
Type: cslu
Cslu address: <empty>
Proxy:
Not Configured

Miscellaneous:
Custom Id: <empty>

Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)

Usage Reporting:
Last ACK received: <none>
Next ACK deadline: <none>
Reporting push interval: 0 (no reporting)
Next ACK push check: <none>
Next report push: <none>
Last report push: <none>
Last report file write: <none>

Trust Code Installed: <none>

License Usage
=============

No licenses in use

Product Information
===================
UDI: PID:C8200-1N-4T,SN:XXXYYYYXXXX

Agent Version
=============
Smart Agent for Licensing: 5.0.6_rel/47

License Authorizations
======================
Overall status:
Active: PID:C8200-1N-4T,SN:XXXYYYYXXXX
Status: NOT INSTALLED

Purchased Licenses:
No Purchase Information Available

Unfortunately, I cannot even open a TAC now, as the support is set to start on April 10th and the seller tells me that cisco starts the contract a month after shipping date...

Thanks!

[Georg Pauwen · Accepted solution]

Hello,

I think this is your problem:

License Usage
=============

No licenses in use

Since smart licensing is mandatory, your only option is to enable the license (which as you said, is not possible for another month)...

[jvujcich]

Hi There,

You need to use the CLI command (In global config mode):

8200# (config) License Boot level network-advantage

[paul driver]

Hello
I had the exact same issue a couple of months back on CAT8500L routers, and the solution was:
license boot level network-advantage addon dna-advantage

[haiganwa]

try this

license boot level network-essentials addon dna-essentials

[Kepler]

In my case with cisco C8200-1N-4T
C8200#conf t
C8200(config)#license boot level network-advantage
C8200(config)#do write
C8200(config)#do reload
this helped.