Packet Tracer - Site to Site VPN

[netacaduser]

Hi,

I have created a network that consists of 3 routers, I am trying to create an site to site vpn tunnel between the 3 routers using the crypto isakmp policy commands however, it is not available (invalid input detected). Upon entering the command "crypto ?", it just shows as blank (see below).

Note - I am using an empty router which I have configured from scratch.

Any ideas on the above would be appreciated.

Thanks.

[netacaduser]

Apologies.. This is what it shows when entering crypto ?

Router(config)#crypto ?

key Long term key operations

[Rob Ingram]

Hi,
I imagine you are not licensed for ipsec VPN which is why the commands are not available. What license do you have on that router?

[netacaduser]

Hi,

I am using an empty router. I could not get anything when using the sh license command however, this is the version I am using:

Cisco Internetwork Operating System Software
IOS (tm) PT1000 Software (PT1000-I-M), Version 12.2(28), RELEASE SOFTWARE (fc5)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2005 by cisco Systems, Inc.
Compiled Wed 27-Apr-04 19:01 by miwang
Image text-base: 0x8000808C, data-base: 0x80A1FECC

ROM: System Bootstrap, Version 12.1(3r)T2, RELEASE SOFTWARE (fc1)
Copyright (c) 2000 by cisco Systems, Inc.
ROM: PT1000 Software (PT1000-I-M), Version 12.2(28), RELEASE SOFTWARE (fc5)

System returned to ROM by reload
System image file is "flash:pt1000-i-mz.122-28.bin"

PT 1001 (PTSC2005) processor (revision 0x200) with 60416K/5120K bytes of memory
.
Processor board ID PT0123 (0123)
PT2005 processor: part number 0, mask 01
Bridging software.
X.25 software, Version 3.0.0.
1 Gigabit Ethernet/IEEE 802.3 interface(s)
1 Low-speed serial(sync/async) network interface(s)
32K bytes of non-volatile configuration memory.

[luis_cordova]

Hi @netacaduser 

Try with this model:

Regards

[netacaduser]

Hi,

I will give that a go - Only issue is I have to recreate my whole network if I change the router as it's already configured. Ideally would be great if I can apply a license on my current router (see version in other reply)

[luis_cordova]

Hi @netacaduser 

As far as I know, you cannot activate licenses in PT.
For that, I suggest you copy your current settings to a notepad and copy them to the new router, adapting the settings.

Regards

[netacaduser]

Thanks @luis_cordova !

On another note (same subject), I need a router that has a Gigabit Ethernet port, serial port and will allow me to use the crypto ipsec function. I have tried a few routers but can't find one to support all 3, any suggestions pls?

[luis_cordova · Accepted solution]

Hi @netacaduser 

On PT, two models that support ipsec are 1841 and ISR4321

1841 = Support FastEthernet and serial port

ISR4321 = Support GigaEthernet but not serial port

Router 1841 supports Giga, but using fiber, which forces you to use fiber at both ends of the link.

Regards

[netacaduser]

Great - Thank you so much for your help!

[james.king14]

If you need an older router try the 2911

[netacaduser]

Thank you! I will give this ago if the other routers do not work with what I need!