08-04-2013 02:42 AM
Hello,
I am replacing a Cisco 2811 running the image c2800nm-advipservicesk9-mz.124-7.bin with a Cisco 2901 router running c2900-universalk9-mz.SPA.152-4.M4.bin
In the 2811 config there are a number of crypto commands as shwon below:
crypto isakmp policy 10
authentication pre-share
group 2
!
crypto isakmp policy 20
encr 3des
authentication pre-share
group 2
crypto isakmp key secretkey address 0.0.0.0 0.0.0.0
crypto isakmp invalid-spi-recovery
!
!
crypto ipsec transform-set TF-DMVPN esp-3des esp-md5-hmac
mode transport
!
crypto ipsec profile PRF-DMVPN
set transform-set TF-DMVPN
The crypto isakmp and crypto ipsec commands are not available on the 2901.
I think that this is because the router is not licensed for them.
The show feature license out is shown below:
ABZ1-RT1#show license feature
Feature name Enforcement Evaluation Subscription Enabled RightToUse
ipbasek9 no no no yes no
securityk9 yes yes no no yes
uck9 yes yes no yes yes
datak9 yes yes no no yes
gatekeeper yes yes no no yes
SSL_VPN yes yes no no yes
ios-ips-update yes yes yes no yes
SNASw yes yes no no yes
hseck9 yes no no no no
cme-srst yes yes no no yes
WAAS_Express yes yes no no yes
UCVideo yes yes no no yes
Is my assumption correct? - if yes what do I need to do to enable the crypto commands?
Thanks
Solved! Go to Solution.
08-04-2013 07:10 AM
Hi James
Licenses on a 2951 (and other ISR G2s) need to be enabled by license key.
You'll need to order the "Security (SEC)" license.
Hope this helps.
08-04-2013 07:10 AM
Hi James
Licenses on a 2951 (and other ISR G2s) need to be enabled by license key.
You'll need to order the "Security (SEC)" license.
Hope this helps.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: