IPSec VPN Feature is not found in CISCO891-K9 router

[A R M Mahbubul Haque]

I want to configure IPsec over GRE tunnel in CISCO891-K9 router. GRE tunnel is working fine but I can't configure IPSEC. I found that crypto isakmp or crypro ipsec command is not there. The show version of the CISCO891-K9 is:

EFLWH-1#sh ver

Cisco IOS Software, C890 Software (C890-UNIVERSALK9_NPE-M), Version 15.2(4)M2, R                                                                             ELEASE SOFTWARE (fc2)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2012 by Cisco Systems, Inc.

Compiled Wed 07-Nov-12 23:11 by prod_rel_team

ROM: System Bootstrap, Version 12.4(22r)YB3, RELEASE SOFTWARE (fc1)

EFLWH-1 uptime is 2 days, 19 hours, 24 minutes

System returned to ROM by power-on

System image file is "flash:c890-universalk9_npe-mz.152-4.M2.bin"

Last reload type: Normal Reload

Last reload reason: power-on

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

export@cisco.com.

Cisco 891 (MPC8300) processor (revision 1.0) with 498688K/25600K bytes of memory.

Processor board ID FGL170926DF

9 FastEthernet interfaces

1 Gigabit Ethernet interface

1 Serial interface

1 terminal line

256K bytes of non-volatile configuration memory.

247464K bytes of ATA CompactFlash (Read/Write)

License Info:

License UDI:

-------------------------------------------------

Device#   PID                   SN

-------------------------------------------------

*0        CISCO891-K9           FGL170926DF

License Information for 'c890'

    License Level: advipservices_npe   Type: Permanent

    Next reboot license Level: advipservices_npe

Configuration register is 0x2102

[rkumar5]

Hi,

You would need the security feature license in order to configure IPSEC VPN

HTH!!

Regards

Raj Kumar

[Karsten Iwen]

You are running the "Advanced IP Services" feature set which includes all kind of crypto and security by default. BUT: The version you are running is the NPE-version which stands for "no payload encryption". If you want to encrypt your data you need the same "advanced IP services" feature set you have, but without the NPE-restriction.

Sent from Cisco Technical Support iPad App

[A R M Mahbubul Haque]

Dear Karsten,

Thanks for your answer. So if I upload  "c890-universalk9-mz.153-2.T.bin" IOS then I can configure IPSEC VPN. Am I right dear?

[Karsten Iwen · Accepted solution]

Yes, It should work then.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[A R M Mahbubul Haque]

Thanks. Its works. But in show version I found "License Level: advipservices   Type: Default. No valid license found." Is there any problem in Licence level and what to do?

[YaJun Liu]

Any update? I have same problem.

The advipservices  license is Permanent or just 60days after image migra  from c890-universalk9_npe-mz.151-4.M4.bin to c890-universalk9-mz.150-1.M3.bin???

[A R M Mahbubul Haque]

After upgrading, the advipservices  license is shown as default and router is works perfectly till now.

[chrisgapske2]

The answer is use another vendor.