Cisco ISR 4461 IPSec Requirement

[ahmedgaily]

Dears,

We have Cisco ISR 4461 with SD-WAN image and IPBase license and we need to use it as IPSec VPN gateway. Is there are any additional requirements or not?

Thanks in advance.

Thanks!

[BDG]

Hi
It is usually necessary to purchase the SEC feature set or the more functional AX. After purchasing them, you will receive an archive with the instructions in pdf format, as well as a license file with the extension .lic
The license file is linked to the serial number of the device.

You need to install them on your device. Move to flash: and make the license install flash:***. lic
You can check this by entering the show version and show license ? commands

[ahmedgaily]

Hi BDG,

You mean this PN: (SL-44-APP-K9: AppX License for Cisco ISR 4400 Series)
And Kindly find below show version and show license commands:

VAS-Gateway#show version
Cisco IOS XE Software, Version 16.12.03
Cisco IOS Software [Gibraltar], ISR Software (X86_64_LINUX_IOSD-UCMK9-M), Version 16.12.3, RELEASE SOFTWARE (fc5)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2020 by Cisco Systems, Inc.
Compiled Mon 09-Mar-20 21:58 by mcpre
Cisco IOS-XE software, Copyright (c) 2005-2020 by cisco Systems, Inc.
All rights reserved. Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0. The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0. For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.
ROM: IOS-XE ROMMON
Office-Gateway uptime is 3 minutes
Uptime for this control processor is 4 minutes
System returned to ROM by PowerOn
System image file is "bootflash:packages.conf"
Last reload reason: PowerOn
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
Suite License Information for Module:'esg'
--------------------------------------------------------------------------------
Suite Suite Current Type Suite Next reboot
--------------------------------------------------------------------------------
Technology Package License Information:
-----------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------
ipbase ipbasek9 None ipbasek9
The current throughput level is unthrottled
Smart Licensing Status: Smart Licensing is DISABLED
cisco ISR4461/K9 (3RU) processor with 3743807K/6147K bytes of memory.
Processor board ID FDO2449M3G2
4 Gigabit Ethernet interfaces
2 Ten Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
8388608K bytes of physical memory.
7573503K bytes of flash memory at bootflash:.
0K bytes of WebUI ODM Files at webui:.
Configuration register is 0x2102

!

VAS-Gateway#show license
Index 1 Feature: ipbasek9
Index 2 Feature: hseck9

Thanks

[BDG]

You first wrote about the ipbasek9 license. If you have hseck9, you can try configuring the IPsec VPN gateway.

[balaji.bandi]

VAS-Gateway#show license
Index 1 Feature: ipbasek9
Index 2 Feature: hseck9

Good for VPN