Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
New Member

CISCO2610 : IPsec transform-set, crypto-invalid input

IPsec transform-set, crypto-invalid input

while defining an IPsec transform-set on a cisco 2610 router i get the following errors:


c2600(config)#crypto ipsec transform-set vpn-transform esp-des ah-md5-hmac


% Invalid input detected at '^' marker.

i am running a cisco 2600 series of following version:


c2600#show version

Cisco Internetwork Operating System Software

IOS (tm) C2600 Software (C2600-IX-M), Version 12.3(15b), RELEASE SOFTWARE (fc1)

Copyright (c) 1986-2005 by cisco Systems, Inc.

Compiled Thu 25-Aug-05 13:38 by ssearch

Image text-base: 0x80008098, data-base: 0x80ECF9E0

ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)

c2600 uptime is 4 hours, 15 minutes

System returned to ROM by reload at 05:48:27 NST Mon Mar 1 1993

System image file is "flash:c2600-ix-mz.123-15b.bin"

cisco 2610 (MPC860) processor (revision 0x202) with 61440K/4096K bytes of memory.

Processor board ID JAD041108SN (2564682236)

M860 processor: part number 0, mask 49

Bridging software.

X.25 software, Version 3.0.0.

1 Ethernet/IEEE 802.3 interface(s)

32K bytes of non-volatile configuration memory.

16384K bytes of processor board System flash (Read/Write)

Configuration register is 0x2102

I am trying to setup a Remote Access VPN gateway using the reference from the following cisco documentation

i am kinda clueless with this. i think the 2600 doesnot supports crypto command or has a different command to do the same job.

New Member

Re: CISCO2610 : IPsec transform-set, crypto-invalid input

I have been googling like a mad man. I still don't have much clues since this is the first time i've ever touched a router but i think this cisco2600 thing needs an IOS upgrade. I think the IPSEC modules needed for the crypto is missing.

I checked this:

and got that:

means I have to find the man who gave me this router and get

either this:Valid Purchase or Sales Order Number and Customer Number

or this: PICA Registration Number and Verification Key

or this:CCIE Certification

whatever it is its a hell lot of work i assume. so before get going on this I need to be sure I am doing the right thing and If I do this correctly I will be getting a nice pat on my back from my boss. I am completely and insanely confused!

Cisco Employee

Re: CISCO2610 : IPsec transform-set, crypto-invalid input


This c2600-ix-mz.123-15b.bin is not a crypto image.

Crypto enabled image will have a 'k9' notation somewhere in the image name.

Put the proper code image in the router to use crypto commands.


CreatePlease to create content