crypto ikev2 command

[jobeattie]

Hi

I'm trying to configure an IPSEC VPN on a 2821 router, but it won't accept the command "crypto ikev2"

I've tried a few different software images - 15.0 and 15.1 T & M train advsecurity, and 15.0 advipservices. (Only have 64MB flash so can't load 15.1 advipservices.)

Is there something with the 2821 that doesn't support ikev2? I don't recall seeing anything in the release notes saying it is only supported on specific models.

Ultimately I'm trying to configure a VPN to Microsoft Azure. The sample config they supply, (which I have working on a few 880 series routers with 15.1  without any problems) has the following config:

crypto ikev2 proposal azure-proposal
  encryption aes-cbc-256 aes-cbc-128 3des
  integrity sha1
  group 2
  exit

crypto ikev2 policy azure-policy
  proposal azure-proposal
  exit

From: https://msdn.microsoft.com/en-us/library/azure/dn133800.aspx?f=255&MSPPError=-2147217396

Can I still use this router?

What's different between 15.1 on the 880 series to the 2800?

thanks

Jon

[Henrik Grankvist · Accepted solution]

Hi

I've looked at the Cisco Feature Navigator and from what I can see there is that no 2821 images supports IKEv2, and it's end of sale now so no new images will be released.

[jobeattie]

Thank you Henrik

Yes I've just spent some time exploring and learning the feature navigator and can see that now. Pity about the 2821 as I have a few of these I was hoping to re-purpose. Looks like I'll need to find a 1900 or 2900 series for this project.

Interestingly I cannot see the command "crypto ikev2" in the Command Lookup Tool! I can see a clear a and a few show commands only. 

Best regards.

Jon