cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2258
Views
5
Helpful
2
Replies

DMVPN with Ikev2 using Cisco881-Sec/K9 and 1941-SEC/k9 as client router

vinod_sharma7
Level 1
Level 1

Hello All,

 

Could anyone please confirm if Cisco 881/K9 with ip services license and 1941/K9 with security license support Ikev2 and certificate based authentication as DMVPN clients. Appreciate if you could share any relevent document confirming the same. 

 

Thanks a lot. 

 

 

2 Replies 2

Hi,

 

This link confirms DMVPN is supported on a 881

https://www.cisco.com/c/en/us/products/routers/881-integrated-services-router-isr/index.html

 

And this link confirms FlexVPN is supported on a 881 and 1941, FlexVPN is IKEv2 only.

https://www.cisco.com/c/en/us/products/collateral/routers/asr-1000-series-aggregation-services-routers/data_sheet_c78-704277.html

 

You can also use the Cisco Feature Navigator web site http://cfn.cloudapps.cisco.com/ITDIT/CFN/jsp/by-feature-technology.jsp

So basically yes i'd say it is supported, best you lab the design. I'd make sure though you are using an up to date IOS firmware version.

 

HTH

 

Just to close all the questions, response from Cisco partner support:
Yes, the 881 and 1941 routers will support IKEv2 and certificate authentication. The 1941 supports DMVPN with the Security/K9 technology license. The 881 requires the Advanced IP Services feature set, not the Advanced Security features set (default). If the 881 routers in question have the Advanced Security image, they will need to upgrade to the Advanced IP Services image to support DMVPN.
Unfortunately there is no exact document confirming that.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: