Cisco Router crypto isakmp policy command missing - IPSEC VPN

[youness hafid]

I have been looking around and I can not find the " crypto isakmp policy " command on this Cisco Router.  I just wanted to setup a regular IPSEC Site To Site tunnel and surprise, the command is not there. Do I have the wrong IOS?

Any suggestions are appreciated

This is what I get:

Router(config)#crypto ?
  key  Long term key operations
  pki  Public Key components

Router#show version
Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.1(4)M, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Thu 24-Mar-11 13:55 by prod_rel_team

ROM: System Bootstrap, Version 15.0(1r)M9, RELEASE SOFTWARE (fc1)

SEMAG_Router uptime is 48 weeks, 1 day, 22 hours, 15 minutes
System returned to ROM by power-on
System image file is "flash0:c1900-universalk9-mz.SPA.151-4.M.bin"
Last reload type: Normal Reload


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco CISCO1941/K9 (revision 1.0) with 487424K/36864K bytes of memory.
Processor board ID FCZ152670PJ
2 Gigabit Ethernet interfaces
1 Serial interface
1 terminal line
1 Channelized E1/PRI port
DRAM configuration is 64 bits wide with parity disabled.
255K bytes of non-volatile configuration memory.
250880K bytes of ATA System CompactFlash 0 (Read/Write)


License Info:

License UDI:

-------------------------------------------------
Device#   PID                   SN
-------------------------------------------------
*0        CISCO1941/K9          FCZ152670PJ



Technology Package License Information for Module:'c1900'

----------------------------------------------------------------
Technology    Technology-package          Technology-package
              Current       Type          Next reboot
-----------------------------------------------------------------
ipbase        ipbasek9      Permanent     ipbasek9
security      None          None          None
data          None          None          None

Configuration register is 0x2102

[Karsten Iwen]

IPsec VPNs (and most of the security features) are not in the IPBase license. You need the security license which you don't have:

----------------------------------------------------------------
Technology    Technology-package          Technology-package
              Current       Type          Next reboot
-----------------------------------------------------------------
ipbase        ipbasek9      Permanent     ipbasek9
security      None          None          None
data          None          None          None

[youness hafid]

Ok thank you, but What I have to do ?

[Karsten Iwen · Accepted solution]

If you need to use this device for your VPN, then contact your preferred Cisco-Reseller for the "Cisco 1900 Security-License" which has an ordering code of "L-SL-19-SEC-K9=".

If you have a different device that can terminate your VPN, you could also use that one.

[youness hafid]

what is code of "L-SL-19-SEC-K9=". ?

[Karsten Iwen]

That is the number the cisco reseller has to use when ordering the license at the distribution.

[JeremyCReese]

I'm really hating the business model.

[w21303402501581]

At $939.99 from CDW it's not likely it's something most of us can afford ;-(