cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2037
Views
0
Helpful
7
Replies

crypto isakmp not working after IOS upgrade

nova505llc
Level 1
Level 1

My vpn router has been running for a very long time using ios version 12.0 (c2600-is56i-mz.120-28a.bin) however I recently upgraded the ios to 12.3 (c2600-i-mz.123-9.bin) but after doing so the crypto isakmp configuration no longer works, during boot I get a cisco invalid input detected at '^' marker for all lines that have to do with the following configuration:

crypto isakmp policy 1
authentication pre-share
crypto isakmp key bl6bOAMxxxxxx address xx.xx.xx.xx
crypto isakmp keepalive 10
!
!
crypto ipsec transform-set dnc esp-des esp-md5-hmac
!
!
crypto map eth10 10 ipsec-isakmp
set peer xx.xx.xx.xx
set transform-set dnc

match address 150

 

So the router will boot and remove the above from the running configuration.  Any ideas how to fix? Any help is much appreciated

1 Accepted Solution

Accepted Solutions

Leo Laohoo
Hall of Fame
Hall of Fame
The IOS loaded doesn't support crypto feature.
Look at the filename of the IOS. It doesn't have the "k9" designation which stands for "crypto".

View solution in original post

7 Replies 7

Leo Laohoo
Hall of Fame
Hall of Fame
The IOS loaded doesn't support crypto feature.
Look at the filename of the IOS. It doesn't have the "k9" designation which stands for "crypto".

Thank you for you help.

One other question, when I try to load another IOS with k9 I get not enough space error.  Show run shows 48mb:

 

cisco 2610 (MPC860) processor (revision 0x202) with 41984K/7168K bytes of memory

 

Flash directory shows:

7864316 bytes total (7864316 bytes free)

 

The IOS file is 14mb

There should be enough space to load but it won't.

Post the complete output to the following commands:
1. dir; and
2. sh version

dir:

Directory of flash:/

1 -rw- 5485880 <no date> c2600-is56i-mz.120-28a.bin
2 -rw- 2210 <no date> config

8388608 bytes total (2900388 bytes free)


sh ver:

Cisco Internetwork Operating System Software
IOS (tm) C2600 Software (C2600-IS56I-M), Version 12.0(28a), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2004 by cisco Systems, Inc.
Compiled Wed 21-Apr-04 21:42 by cmong
Image text-base: 0x80008088, data-base: 0x809BD8B4

ROM: System Bootstrap, Version 11.3(2)XA3, PLATFORM SPECIFIC RELEASE SOFTWARE (fc1)

uptime is 1 hour, 23 minutes
System restarted by reload
System image file is "flash:c2600-is56i-mz.120-28a.bin"

cisco 2610 (MPC860) processor (revision 0x202) with 41984K/7168K bytes of memory.
Processor board ID JAB025305AW (3056935962)
M860 processor: part number 0, mask 49
Bridging software.
X.25 software, Version 3.0.0.
5 Ethernet/IEEE 802.3 interface(s)
32K bytes of non-volatile configuration memory.
8192K bytes of processor board System flash (Read/Write)

Configuration register is 0x2102

Make sense.
The router flash size is only 8 Mb and the IOS file is 14 Mb.

Isn't the total size the 41984K/7168 though?

That is DRAM.
Review Cisco Networking products for a $25 gift card