cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
502
Views
0
Helpful
1
Replies

IOS 15

James Hawkins
Level 8
Level 8

Hello,

I am replacing a Cisco 2811 running the image c2800nm-advipservicesk9-mz.124-7.bin with a Cisco 2901 router running c2900-universalk9-mz.SPA.152-4.M4.bin

In the 2811 config there are a number of crypto commands as shwon below:

crypto isakmp policy 10

authentication pre-share

group 2

!

crypto isakmp policy 20

encr 3des

authentication pre-share

group 2

crypto isakmp key secretkey address 0.0.0.0 0.0.0.0

crypto isakmp invalid-spi-recovery

!

!

crypto ipsec transform-set TF-DMVPN esp-3des esp-md5-hmac

mode transport

!

crypto ipsec profile PRF-DMVPN

set transform-set TF-DMVPN

The crypto isakmp and crypto ipsec commands are not available on the 2901.

I think that this is because the router is not licensed for them.

The show feature license out is shown below:

ABZ1-RT1#show license feature

Feature name             Enforcement  Evaluation  Subscription   Enabled  RightToUse

ipbasek9                 no           no          no             yes      no   

securityk9               yes          yes         no             no       yes  

uck9                     yes          yes         no             yes      yes  

datak9                   yes          yes         no             no       yes  

gatekeeper               yes          yes         no             no       yes  

SSL_VPN                  yes          yes         no             no       yes  

ios-ips-update           yes          yes         yes            no       yes  

SNASw                    yes          yes         no             no       yes  

hseck9                   yes          no          no             no       no   

cme-srst                 yes          yes         no             no       yes  

WAAS_Express             yes          yes         no             no       yes  

UCVideo                  yes          yes         no             no       yes  

Is my assumption correct? - if yes what do I need to do to enable the crypto commands?

Thanks

1 Accepted Solution

Accepted Solutions

barry
Level 7
Level 7

Hi James

Licenses on a 2951 (and other ISR G2s) need to be enabled by license key.

http://www.cisco.com/en/US/prod/collateral/modules/ps10598/ordering_guide_c07_557736_ps10537_Products_Data_Sheet.html

You'll need to order the "Security (SEC)" license.

Hope this helps.

Barry Hesk
Intrinsic Network Solutions

View solution in original post

1 Reply 1

barry
Level 7
Level 7

Hi James

Licenses on a 2951 (and other ISR G2s) need to be enabled by license key.

http://www.cisco.com/en/US/prod/collateral/modules/ps10598/ordering_guide_c07_557736_ps10537_Products_Data_Sheet.html

You'll need to order the "Security (SEC)" license.

Hope this helps.

Barry Hesk
Intrinsic Network Solutions

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: