sec license on router 2911 for IKEv2

[amralrazzaz]

i have cisco router 2911 running c2900-universalk9-mz.SPA.154-3.M1.bin and need to install sec license with part number SL-29-SEC-K9

so is it compatible to have the license with this ios version that is currently running on my router 

also it the license already available ? i hope yes becuase i need this very much 

i cant configure IKEv2,ipsec , all crypto options all features disables 

CISCO2911-EGCAI01#show ver
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.4(3)M1, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Sat 25-Oct-14 03:34 by prod_rel_team

ROM: System Bootstrap, Version 15.0(1r)M16, RELEASE SOFTWARE (fc1)

CISCO2911-EGCAI01 uptime is 2 hours, 14 minutes
System returned to ROM by reload at 14:10:27 EET Wed May 6 2020
System restarted at 14:12:41 EET Wed May 6 2020
System image file is "flash0:c2900-universalk9-mz.SPA.154-3.M1.bin"
Last reload type: Normal Reload
Last reload reason: Reload Command

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
--More--

compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco CISCO2911/K9 (revision 1.0) with 483328K/40960K bytes of memory.
Processor board ID FCZ190360AM
3 Gigabit Ethernet interfaces
1 terminal line
8 Voice FXO interfaces
DRAM configuration is 64 bits wide with parity enabled.
255K bytes of non-volatile configuration memory.
255488K bytes of ATA System CompactFlash 0 (Read/Write)

License Info:

License UDI:

-------------------------------------------------
Device# PID SN
-------------------------------------------------
*1 CISCO2911/K9 FCZ190360AM

Technology Package License Information for Module:'c2900'

------------------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------------
ipbase ipbasek9 Permanent ipbasek9
security None None None
uc uck9 Permanent uck9
data None None None
NtwkEss None None None
CollabPro None None None

Configuration register is 0x2102

CISCO2911-EGCAI01#

[Karsten Iwen]

Before buying a license for this device, be aware that the ISR 2900 is approaching EOL soon. I would not invest any more money into this device. Instead I would go for an actual and longer supported ISR.

[amralrazzaz]

actually im forced to buy the license becuase i have project and dont have time but with next few incoming months i will buy Asa FTD but for now just need this to activate the sec license for ikev2 ipsec conf

thanks for ur advice and u totally correct but just timing is my issue now 

i think 2900 support till end of 2022!! if im correct

[Karsten Iwen]

There are a couple of dates in the EOL-bulletin. Some people (yes, I am one of them) say that it's not the last one that is most important. For me, the following is the most relevant:

End of Vulnerability/Security Support:  HW

The last date that Cisco Engineering may release a planned maintenance release or scheduled software remedy for a security vulnerability issue.

December 8, 2020

Although it's "only" HW, it could be related to image verification, booting the system, and so on. I would not want to keep these devices past this date in my network or connected to the internet.