ikev2 command not reconized by cisco ios 15.7(3)

[cmsmallegan]

I am trying to set up a ikev2 vpn so that my phone can connect to my Cisco 1941 router remotely but when i issue crypto ikev2 it doesn't recognize the command. 

[Matt Kahle]

What version of firmware are you running on your router? Also could you provide a declassified config?

[cmsmallegan]

Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.7(3)M4a, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2019 by Cisco Systems, Inc.
Compiled Mon 25-Mar-19 03:45 by prod_rel_team

ROM: System Bootstrap, Version 15.0(1r)M16, RELEASE SOFTWARE (fc1)

PLCHL uptime is 17 hours, 11 minutes
System returned to ROM by reload at 01:26:31 UTC Wed May 29 2019
System restarted at 01:49:24 UTC Wed May 29 2019
System image file is "flash:c1900-universalk9-mz.spa.157-3.m4a.bin"
Last reload type: Normal Reload
Last reload reason: Reload Command



This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco CISCO1941/K9 (revision 1.0) with 491520K/32768K bytes of memory.
Processor board ID FJC1944E47X
2 Gigabit Ethernet interfaces
1 terminal line
DRAM configuration is 64 bits wide with parity disabled.
255K bytes of non-volatile configuration memory.
255488K bytes of ATA System CompactFlash 0 (Read/Write)

========================================================

Thats what show version prints out

[cmsmallegan]

Using 2200 out of 262136 bytes
!
! Last configuration change at 03:48:28 UTC Wed May 29 2019 by ***********
!
version 15.7
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname PLCHL
!
boot-start-marker
boot system flash:c1900-universalk9-mz.spa.157-3.m4a.bin
boot-end-marker
!
!
enable secret 5 ************************.
enable password 7 **********************
!
no aaa new-model
!
!
!
!
!
!
!
!
!
ip dhcp excluded-address 10.0.0.1 10.0.0.29
!
ip dhcp pool PLCHL
network 10.0.0.0 255.255.255.0
domain-name PLCHL
dns-server 1.1.1.1
default-router 10.0.0.1
lease 10
!
ip dhcp pool PLCHL-WindowsServer
host 10.0.0.6 255.255.255.0
client-identifier ****.****.****
!
ip dhcp pool PLCHL-Switch
host 10.0.0.2 255.255.255.0
client-identifier ****.****.****
!
ip dhcp pool PLCHL-MinecraftServer
host 10.0.0.7 255.255.255.0
client-identifier ****.****.****
!
ip dhcp pool PLCHL-AP-Upstairs
host 10.0.0.3 255.255.255.0
client-identifier ****.****.****
!
!
!
ip domain name PLCHL
ip host Upstairs-AP 10.0.0.3
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
cts logging verbose
!
!
license udi pid CISCO1941/K9 sn *********
!
!
username ********** password 7 ********************
!
redundancy
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 10.0.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
no mop enabled
!
interface GigabitEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat inside source list 1 interface GigabitEthernet0/1 overload
ip nat inside source static tcp 10.0.0.7 25565 interface GigabitEthernet0/1 25565
!
!
!
access-list 1 permit 10.0.0.0 0.0.0.255
!
control-plane
!
!
line con 0
logging synchronous
login local
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 ******
login local
transport input ssh
!
scheduler allocate 20000 1000
ntp server pnpntpserver.lan
!
end

[Matt Kahle]

Could you please provide a show Version.

I'm thinking you may not have a VPN module installed.

[Philip D'Ath]

Does your router have a security licence?

[Matt Kahle]

Shouldn't a universal k9 licence cover encryption?

[Philip D'Ath]

For basic things like SSH, but not for anything else.  You need a security licence.