If you already have the

Imran Ahmad · ‎05-15-2014

Hello,

We want to order new cisco routers 1921 with IOS-Security software. as I searched cisco website, I could not find the info needed. on the website it is written-

CISCO1921/K9

S19NPEK9-15014M

Cisco IOS universal Image (No Payload Encryption) for 1941, 1921

Can any one tell me what exact SKU or part-number I should order to have IOS-Security software on Cisco router 1921 ?

Ruggero Delcuratolo · ‎05-15-2014

Some IOS Security commands are enabled by default, but if you need Advanced Security you can purchase the onw below:

Security License for Cisco 19xx

SL-19-SEC-K9

Here is a Table that shows what you need based on the feature you implement:

When you see "Security Technology Package License" listed among one of your needed features, it means that you need to buy: SL-19-SEC-K9

Table 1. Security License Requirements for Cisco 1900, 2900, and 3900 Series Integrated Services Routers


Features	License Required
Authentication, authorization, and accounting (AAA), NetFlow, Network-Based Application Recognition (NBAR), access control lists (ACLs), Cisco IOS Flexible Packet Matching (FPM), 802.1x, and Cisco IOS Network Foundation Protection	None (available in base image)
Standard IP Security (IPSec), Group Encrypted Transport VPN, Dynamic Multipoint VPN (DMVPN), Easy VPN and Enhanced Easy VPN, Virtual Tunnel Interface (VTI), Multi-Virtual Route Forwarding (VRF) Customer Edge (CE) (IPSec, firewall, and IPS), IPSec high availability, Cisco IOS Zone-Based Firewall, advanced application inspection and control, firewall for secure unified communications, VRF-aware firewall, firewall high availability, transparent firewall, Cisco IOS IPS, transparent IPS, VRF-aware IPS, secure provisioning and digital certificates, and Cisco IOS Certificate Server and Client	Security Technology Package License
Cisco IOS SSL VPN	Security Technology Package License + SSLVPN Feature License
Cisco IOS Content Filtering	Security Technology Package License + Content Filtering Subscription License
Cisco IOS IPS Subscription Service	Security Technology Package License + IPS Service

ageralde · ‎05-15-2014

Hi Waheed123, i see that you are looking at the ISR 1921 with IOS-Security software, you may check this link: http://cs.co/9009il5b. For further assistance to make sure you purchase the right part number, feel free to message or contact me directly. Hope this helps!:)

Imran Ahmad · ‎05-17-2014

Thanks for the info, but I need Security-Firewall Features available on the Cisco 1921.

I think I should go with the following part-numbers which has Universal IOS. please give me your comments

CISCO1921/K9

S19UK9-15014M

Cisco IOS universal Image for 1921

is it the correct part-number, please let me know to process my order

Blake Arsenault · ‎05-17-2014

I remember when I first was challenged with ordering equipment - this should be easy - NOPE! It can be a cumbersome task going through the diverse Cisco website....but at least the information is there. It's just a matter of finding it...

This is just my experience; I'm sure there are other ways. When looking for SKUs, I've gotten into the habit of doing a Google search for the so-called ordering guide; for instance, "Cisco 1900 ordering guide". That usually gets me to a lengthy page of details including the SKUs, descriptions, and some general non-technical directions on choosing the right ones. In this case:
http://www.cisco.com/c/en/us/products/collateral/routers/1900-series-integrated-services-routers-isr/ordering_guide_c07_557736.html

The S19NPEK9-15014M appears to just be a universal software image and nothing else. In your case, you already mention the official SKU CISCO1921/K9. The advanced security license is indeed required in your case and Ruggero mentions the license SKU of SL-19-SEC-K9 which also makes sense. So those two would have to be ordered. But alternatively as I always do, Cisco has some predone bundles on that same webpage to simplify things for some (not all) purchases.
CISCO1921/K9 + SL-19-SEC-K9 = CISCO1921-SEC/K9

When I'm ordering any 19, 29, or 39 hundred series for advanced security reasons, I'm typically requesting CISCO1921-SEC/K9. Note too that my info only applies if you need a system that fully supports the payload cryptography. In your first posting, the SKU mentions "No Payload Encryption". Of course, most of us require cryptography. If your situation is different, then we'll need to reconsider.

Hope this helps you!

Imran Ahmad · ‎05-18-2014

Hello, I accept what you are saying.

But if I go with CISCO1921/K9 + S19UK9-15014M doesn't it equals to CISCO1921-SEC/K9 ????

Instead of this SKU (SL-19-SEC-K9) , I want to order (S19UK9-15014M)

Please correct me

Ruggero Delcuratolo · ‎05-18-2014

If you already have the Router then you just buy SL-19-SEC-K9 to add the Security license to the Universal IOS.

If you did not order anything yet, then you have to order CISCO1921-SEC/K9 that includes the Router and the Security License for the Universal IOS.

If you buy CISCO1921/K9 and S19UK9-15014M you are just buying the Router with the standard IOS Universal image supporting cryptography.

That does not give you any advanced Security feature and you will need to also add the SL-19-SEC-K9 in order to get the added Security features that you need.

Blake Arsenault · ‎05-18-2014

Waheed, I second all that Ruggero states. Just to add onto it to help any reduce confusion. You continue to mention SKUs for the base universal images. Cisco explicitly states in that ordering guide, "Cisco ISR G2 routers ship with a universal Cisco IOS Software image". Without that, the unit won't even boot up of course. I don't believe it really clearly states which one of the two universal images types is the default, however. But I believe it is always assumed that most organizations require a cryptography-based router. Therefore, when any 1921 hardware is ordered, that base universal image S19UK9-15014M that you mention automatically comes with it. So don't even worry about having to specify it.

NOTE: Only in the rare scenario where cryptography is NOT allowed for some political reason, then the NPE/No Payload Encryption universal image should be specially requested (ie. S19NPEK9-15014M) plus any special licensing on top of that such as the NPE/No Payload Encryption security license (ie. SL-19-SECNPE-K9). Though keep in mind how it states that some of the security license's advanced security features won't be available in an NPE-based router which certainly make sense.

1921 WITH ADVANCED SECURITY WITH CRYPTOGRAPHY:
CISCO1921/K9 + SL-19-SEC-K9
or just the security bundle
CISCO1921-SEC/K9

1921 WITH ADVANCED SECURITY WITHOUT CRYPTOGRAPHY:
CISCO1921/K9 + S19NPEK9-15014M + SL-19-SECNPE-K9

Waheed, I want you to feel comfortable in what you order. It would be an uneasy feeling to receive a shipment that turns out to be incomplete / wrong. So based off of Ruggero's and my experience, I hope the little above summary can take you to the next step. Good luck!

Purchase New Routers