Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Vpn client - crypto isakmp client configuration group Missing

Hello,

I have a Cisco 2611XM running Version 12.2(7r)

I'm trying to get vpn clients to connect to the router following this link:

http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration_example09186a00801c4246.shtml

My problem is that when I try to add the group I don't get the group option.

This is what I get:

My_Router(config)#crypto isakmp client configuration ?

address-pool Set network address for client

Do I need to change IOS version, if so which IOS should I use???

Any help is greatly appreciated. Below is the show version of the current router

Cisco Internetwork Operating System Software

IOS (tm) C2600 Software (C2600-IK9S-M), Version 12.2(17a), RELEASE SOFTWARE (fc1)

Copyright (c) 1986-2003 by cisco Systems, Inc.

Compiled Thu 19-Jun-03 16:35 by pwade

Image text-base: 0x8000808C, data-base: 0x81280FF0

ROM: System Bootstrap, Version 12.2(7r) [cmong 7r], RELEASE SOFTWARE (fc1)

My_Router uptime is 1 minute

System returned to ROM by power-on

System image file is "flash:c2600-ik9s-mz.122-17a.bin"

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

export@cisco.com.

cisco 2611XM (MPC860P) processor (revision 0x100) with 60416K/5120K bytes of memory.

Processor board ID JAE072602F2 (1616341861)

M860 processor: part number 5, mask 2

Bridging software.

X.25 software, Version 3.0.0.

2 FastEthernet/IEEE 802.3 interface(s)

2 Serial(sync/async) network interface(s)

32K bytes of non-volatile configuration memory.

32768K bytes of processor board System flash (Read/Write)

Configuration register is 0x2102

Thanks,

Randall

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Vpn client - crypto isakmp client configuration group Missin

Randall,

TAC is more a break/fix organization. Since the issue that you are running into is more a feature/functionality with the version of code, TAC will most likely not be able to assist you.

Your best option is to upgrade the memory and upgrade the router to 12.3 Mainline or higher.

Let me know if it helps.

Regards,

Arul

3 REPLIES
Cisco Employee

Re: Vpn client - crypto isakmp client configuration group Missin

Randall,

Yes, you are on the right track. The IOS that you are currently running on the router 12.2(17a) does not support GROUP Feature as well as VPN Client 3.x.

You need a minimum of 12.2(15)T2 to support VPN Client 3.x

Now, in your case:

1. You can upgrade to 12.2(15)T15. But this code is deferred and your option is to go 12.3 Mainline.

2. You can upgrade to a version in 12.3 Mainline and this should have all the features that were in 12.2T Train. So, you would get the Group Feature as well as VPN Client 3.x support.

Now, here comes the challenge. The Feature set that you have on the router is "IP PLUS IPSEC 3DES". So, if you go to 12.3(20) which is the latest and GD Version in 12.3 mainline, you need 32 MB Flash and 96 MB RAM. But, the the current memory on the router is only 64 MB, So you need to upgrade the router's memory from 64 MB to 96 MB and upgrade the router 12.3(20).

Let me know if this helps.

Regards,

Arul

New Member

Re: Vpn client - crypto isakmp client configuration group Missin

Arul,

I appreciate your help. I was looking at the

http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp

to verify the IOS of the router (lots of reading ...lol...)

and indeed I agree with you that I would need to upgrade IOS.

Is there any way that I could perhaps contact TAC and maybe they can help me out with the IOS version without having to spend extra money on memory??

Thanks,

Randall

Cisco Employee

Re: Vpn client - crypto isakmp client configuration group Missin

Randall,

TAC is more a break/fix organization. Since the issue that you are running into is more a feature/functionality with the version of code, TAC will most likely not be able to assist you.

Your best option is to upgrade the memory and upgrade the router to 12.3 Mainline or higher.

Let me know if it helps.

Regards,

Arul

315
Views
5
Helpful
3
Replies