Does my ISR4321 IOS support IPSEC configuration?

[neonavras]

I would like to know if my current IOS feature allows me to configure IPSEC in my router - ISR4321

Here's the snip of my sh ver:

Cisco IOS XE Software, Version 03.16.05.S - Extended Support Release
Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.5(3)S5, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Thu 19-Jan-17 09:28 by mcpre


ROM: IOS-XE ROMMON

-- uptime is 11 weeks, 6 days, 9 hours, 51 minutes
Uptime for this control processor is 11 weeks, 6 days, 9 hours, 52 minutes
System returned to ROM by reload
System restarted at 00:04:52 EST Wed Jun 14 2017
System image file is "bootflash:isr4300-universalk9.03.16.05.S.155-3.S5-ext.SPA.bin"
Last reload reason: PowerOn

Suite License Information for Module:'esg'

--------------------------------------------------------------------------------
Suite Suite Current Type Suite Next reboot
--------------------------------------------------------------------------------
FoundationSuiteK9 None None None
securityk9
appxk9

AdvUCSuiteK9 None None None
uck9
cme-srst
cube
Technology Package License Information:

-----------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------
appxk9 None None None
uck9 None None None
securityk9 None None None
ipbase ipbasek9 Permanent ipbasek9

cisco ISR4321/K9 (1RU) processor with 1648597K/6147K bytes of memory.
Processor board ID
2 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
3207167K bytes of flash memory at bootflash:

Thanks in advance!

[Flavio Miranda · Accepted solution]

According to  Cisco doc, nop. You  need to have securityk9 licensing.

securityk9

The securityk9 technology package includes all crypto features, including IPsec, SSL/SSH, Firewall, and Secure VPN.

 

[neonavras]

Hi Flavio, Thank you a lot for your response. Yeap, I would need purchase securityk9 license to proceed. I have checked the Cisco 4000 Series Integrated Services Router Family Ordering Guide as well. Thanks!!

[waleed.kayani1]

Check your license boot:
show run | include boot
you need license boot level securityk9
After adding the boot level you should be able to accept the EULA , and after reloading you can gain access to ISAKMP/IKE commands.

[waleed.kayani1]

Check your license boot:
show run | include boot
you need license boot level securityk9
After adding the boot level you should be able to accept the EULA , and after reloading you can gain access to ISAKMP/IKE commands.