Showing results for 
Search instead for 
Did you mean: 

IPSec VPN Feature is not found in CISCO891-K9 router

I want to configure IPsec over GRE tunnel in CISCO891-K9 router. GRE tunnel is working fine but I can't configure IPSEC. I found that crypto isakmp or crypro ipsec command is not there. The show version of the CISCO891-K9 is:

EFLWH-1#sh ver

Cisco IOS Software, C890 Software (C890-UNIVERSALK9_NPE-M), Version 15.2(4)M2, R                                                                             ELEASE SOFTWARE (fc2)

Technical Support:

Copyright (c) 1986-2012 by Cisco Systems, Inc.

Compiled Wed 07-Nov-12 23:11 by prod_rel_team

ROM: System Bootstrap, Version 12.4(22r)YB3, RELEASE SOFTWARE (fc1)

EFLWH-1 uptime is 2 days, 19 hours, 24 minutes

System returned to ROM by power-on

System image file is "flash:c890-universalk9_npe-mz.152-4.M2.bin"

Last reload type: Normal Reload

Last reload reason: power-on

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

If you require further assistance please contact us by sending email to

Cisco 891 (MPC8300) processor (revision 1.0) with 498688K/25600K bytes of memory.

Processor board ID FGL170926DF

9 FastEthernet interfaces

1 Gigabit Ethernet interface

1 Serial interface

1 terminal line

256K bytes of non-volatile configuration memory.

247464K bytes of ATA CompactFlash (Read/Write)

License Info:

License UDI:


Device#   PID                   SN


*0        CISCO891-K9           FGL170926DF

License Information for 'c890'

    License Level: advipservices_npe   Type: Permanent

    Next reboot license Level: advipservices_npe

Configuration register is 0x2102

1 Accepted Solution

Accepted Solutions

Yes, It should work then.

Don't stop after you've improved your network! Improve the world by lending money to the working poor:

View solution in original post

8 Replies 8



You would need the security feature license in order to configure IPSEC VPN



Raj Kumar

Karsten Iwen
VIP Mentor VIP Mentor
VIP Mentor

You are running the "Advanced IP Services" feature set which includes all kind of crypto and security by default. BUT: The version you are running is the NPE-version which stands for "no payload encryption". If you want to encrypt your data you need the same "advanced IP services" feature set you have, but without the NPE-restriction.

Sent from Cisco Technical Support iPad App

Dear Karsten,

Thanks for your answer. So if I upload  "c890-universalk9-mz.153-2.T.bin" IOS then I can configure IPSEC VPN. Am I right dear?

Yes, It should work then.

Don't stop after you've improved your network! Improve the world by lending money to the working poor:

Thanks. Its works. But in show version I found "License Level: advipservices   Type: Default. No valid license found." Is there any problem in Licence level and what to do?

YaJun Liu

Any update? I have same problem.

The advipservices  license is Permanent or just 60days after image migra  from c890-universalk9_npe-mz.151-4.M4.bin to c890-universalk9-mz.150-1.M3.bin???

After upgrading, the advipservices  license is shown as default and router is works perfectly till now.

The answer is use another vendor. 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers