CISCO2610 : IPsec transform-set, crypto-invalid input

bikashshrestha · ‎05-22-2006

IPsec transform-set, crypto-invalid input

while defining an IPsec transform-set on a cisco 2610 router i get the following errors:

Quote:

c2600(config)#crypto ipsec transform-set vpn-transform esp-des ah-md5-hmac

^

% Invalid input detected at '^' marker.

i am running a cisco 2600 series of following version:

Quote:

c2600#show version

Cisco Internetwork Operating System Software

IOS (tm) C2600 Software (C2600-IX-M), Version 12.3(15b), RELEASE SOFTWARE (fc1)

Compiled Thu 25-Aug-05 13:38 by ssearch

Image text-base: 0x80008098, data-base: 0x80ECF9E0

ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)

c2600 uptime is 4 hours, 15 minutes

System returned to ROM by reload at 05:48:27 NST Mon Mar 1 1993

System image file is "flash:c2600-ix-mz.123-15b.bin"

cisco 2610 (MPC860) processor (revision 0x202) with 61440K/4096K bytes of memory.

Processor board ID JAD041108SN (2564682236)

M860 processor: part number 0, mask 49

Bridging software.

X.25 software, Version 3.0.0.

1 Ethernet/IEEE 802.3 interface(s)

32K bytes of non-volatile configuration memory.

16384K bytes of processor board System flash (Read/Write)

Configuration register is 0x2102

I am trying to setup a Remote Access VPN gateway using the reference from the following cisco documentation

http://www.cisco.com/univercd/cc/td/...m#xtocid200207

i am kinda clueless with this. i think the 2600 doesnot supports crypto command or has a different command to do the same job.

bikashshrestha · ‎05-23-2006

I have been googling like a mad man. I still don't have much clues since this is the first time i've ever touched a router but i think this cisco2600 thing needs an IOS upgrade. I think the IPSEC modules needed for the crypto is missing.

I checked this:

http://www.cisco.com/en/US/products/hw/routers/ps259/products_tech_note09186a00801fc986.shtml#bckc2

and got that:

http://www.cisco.com/pcgi-bin/Software/Iosplanner/Planner-tool/iosplanner.cgi

means I have to find the man who gave me this router and get

either this:Valid Purchase or Sales Order Number and Customer Number

or this: PICA Registration Number and Verification Key

or this:CCIE Certification

whatever it is its a hell lot of work i assume. so before get going on this I need to be sure I am doing the right thing and If I do this correctly I will be getting a nice pat on my back from my boss. I am completely and insanely confused!

Vikas Saxena · ‎05-29-2006

Hello,

This c2600-ix-mz.123-15b.bin is not a crypto image.

Crypto enabled image will have a 'k9' notation somewhere in the image name.

Put the proper code image in the router to use crypto commands.

Vikas