NO Cyrpto IKEv2 Encrption AES command found

[Ruelb2214]

Hi ALL,

We have ASA running in firepower-2130, recently we upgraded to version cisco-asa-fp2k.9.18.4.40.SPA, the upgrade was smooth,

but we encounter crypto graphic error, similar to attached.

Then when I check the commands for "crypto ikev2 policy" the encryption is limited only to des (please refer to attached), do you know WHY?

[Rob Ingram · Accepted solution]

@Ruelb2214 Seems like you don't have the encryption license enabled, so you cannot use strong crypto.

Install the 3DES/AES license (free), which you can get from Cisco Licensing Portal, generate and then paste onto the ASA. Example: https://integrate.uk.com/asa-3des-license/

[Ruelb2214]

Hi Rob, 

Thanks for your immediate action, I followed the guide but it did not update, see attached.

Any other command I need to run?

[Ruelb2214]

Thanks for your help @Rob Ingram we manage to resolve.