Anyconnect on IOS XE 16.9.4 - crypto ssl profile xxx not available

[Difan Zhao]

I am trying to test the anyconnect VPN on my 4331 router. It is running the latest 16.9.4 firmware. I am following this document https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_sslvpn/configuration/xe-16-9/sec-conn-sslvpn-xe-16-9-book/sec-conn-sslvpn-ssl-vpn.html

However, at the step to create the ssl profile, I found that the command is not available

anyconnect(config)#crypto ssl profile ?
% Unrecognized command
anyconnect(config)#crypto ssl ?
  policy    Define SSL policies
  proposal  Define ssl Proposal

Is this a licensing problem? What license do I need to run the anyconnect SSL VPN? Here is my license status

Technology Package License Information:

-----------------------------------------------------------------
Technology    Technology-package           Technology-package
              Current       Type           Next reboot
------------------------------------------------------------------
appxk9           appxk9           Permanent        appxk9
uck9             uck9             Permanent        uck9
securityk9       securityk9       Permanent        securityk9
ipbase           ipbasek9         Permanent        ipbasek9

Thanks,

Difan

[Rob Ingram · Accepted solution]

Hi,

SSL-VPN is not supported on 4000 series routers. The only alternative is to run FlexVPN which is an IKEv2/IPSec VPN Remote Access VPN.

HTH

[Difan Zhao]

Thanks for the response Raj.

[volant]

FYI: Latest IOS-XE (17 and latest) supports SSL VNP 
https://www.cisco.com/c/en/us/td/docs/routers/access/isr4400/software/configuration/xe-17/isr4400-sw-config-xe-17/m_sec-conn-sslvpn-ssl-vpn-xe.html#reference_BD8D760FF72545E0B1B9077B21D39976