vpn configuration

[moholobela]

hello

may you please assist me here. i am having a problem with configuring the vpn on c2900 router. there are no crypto commands except for PKI and KEY.

HQ_R1#sh crypto ?
key Show long term public keys
pki Show PKI

HQ_R1(config)#crypto ?
key Long term key operations
pki Public Key components

and i have the licenses listed as such:

HQ_R1#sh license

Index 1 Feature: ipbasek9
Period left: Life time
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium

Index 2 Feature: securityk9_npe
Period left: 8 weeks 4 days
License Type: EvalRightToUse
License State: Active, Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None

Index 3 Feature: uck9
Period left: 8 weeks 4 days
License Type: EvalRightToUse
License State: Active, Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None

Index 4 Feature: datak9
Period left: 8 weeks 4 days
License Type: EvalRightToUse
License State: Active, Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None

Index 5 Feature: NtwkEssSuitek9_npe
Period left: 8 weeks 4 days
License Type: EvalRightToUse
License State: Active, Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None

Index 6 Feature: CollabProSuitek9_npe
Period left: 8 weeks 4 days
License Type: EvalRightToUse
License State: Active, Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None

Index 7 Feature: ios-ips-update
Period left: 8 weeks 4 days
License Type: EvalRightToUse
License State: Active, Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None

Index 8 Feature: SNASw
Period left: 8 weeks 4 days
License Type: EvalRightToUse
License State: Active, Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None

Index 9 Feature: cme-srst
Period left: 8 weeks 4 days
License Type: EvalRightToUse
License State: Active, Not in Use, EULA not accepted
License Count: 0/0 (In-use/Violation)
License Priority: None

Index 10 Feature: mgmt-plug-and-play
Index 11 Feature: mgmt-lifecycle
Index 12 Feature: mgmt-assurance
Index 13 Feature: mgmt-onplus
Index 14 Feature: mgmt-compliance

[David Castro F. · Accepted solution]

Hello Moholobela,

In order to configure VPN on this router, you will need to purchase a Security License, which will enable it, on this case the Securityk9 license, you may see with the command "Show license feature" the Securityk9  should be fully yes, such as:

#show license feature

Feature name             Enforcement  Evaluation  Subscription   Enabled

ipbasek9                                  no             no                  no             yes

securityk9                               yes          yes                  yes             yes     --> Like this

For further information you may see this doc:

- http://www.cisco.com/c/dam/en/us/products/collateral/routers/3900-series-integrated-services-routers-isr/qa_c67_606268.pdf

Get in touch with your provider in order to get the license, and on this other link you may see the installation for the ISR routers:

 - http://www.cisco.com/c/en/us/td/docs/routers/access/1900/hardware/installation/guide/1900_HIG/Software_Licenses.html

Please dont forget to rate and mark as correct this post, if it helped you! keep me posted!

Regards,

David Castro,

[moholobela]

HQ_R1#sh license feature
Feature name    Enforcement Evaluation Subscription Enabled RightToUse
ipbasek9              no                  no               no              yes          no
securityk9_npe   yes                 yes             no              no            yes

i will work having it soon. thank you very much.

[David Castro F.]

Hey Moholobela,

Great! could you please mark the answer as correct?, since this post has been resolved with the previous answer, additionally if you have any questions let me know,

Thanks,

David Castro,

[moholobela]

thank you.