i have two 891-k9 Router and i want to configure Ipsec Site-to-Site VPN
When i type command #crypto ? it will not give me option of isakmp
Please find below Show Version & Show Lic output of the router. Router# *Sep 25 13:01:12.719: %SYS-5-CONFIG_I: Configured from console by console Router#sh ver Cisco IOS Software, C890 Software (C890-UNIVERSALK9_NPE-M), Version 15.2(4)M6, RELEASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2014 by Cisco Systems, Inc. Compiled Wed 19-Mar-14 22:06 by prod_rel_team
ROM: System Bootstrap, Version 12.4(22r)YB3, RELEASE SOFTWARE (fc1)
Router uptime is 3 minutes System returned to ROM by reload at 12:57:38 UTC Thu Sep 25 2014 System image file is "flash:c890-universalk9_npe-mz.152-4.M6.bin" Last reload type: Normal Reload Last reload reason: Reload Command
This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable --More-- to comply with U.S. and local laws, return this product immediately.
License Information for 'c890' License Level: advipservices_npe Type: Permanent Next reboot license Level: advipservices_npe
Configuration register is 0x2102
Router# sh lic Index 1 Feature: advipservices_npe Period left: Life time License Type: Permanent License State: Active, In Use License Count: Non-Counted License Priority: Medium Index 2 Feature: WAAS_Express Period left: Not Activated Period Used: 0 minute 0 second License Type: EvalRightToUse License State: Not in Use, EULA not accepted License Count: Non-Counted License Priority: None Index 3 Feature: ios-ips-update Period left: Not Activated Period Used: 0 minute 0 second License Type: EvalRightToUse License State: Not in Use, EULA not accepted License Count: Non-Counted License Priority: None
To configure VPN you need to have securityk9 licence, which I dont see here. If you have that licence then you need to enable the licence. You might need to change your IOS version to (advanceipserv) version.
It is not an issue with IOS version. It is an issue with license. The license information indicates "advipservices_npe". The issue is npe which is not payload encryption and does not support crypto IPSec. The original poster needs a license upgrade to be able to use these routers for site to site VPN.
We are pleased to announce availability of Beta software for 16.6.3. 16.6.3 will be the second rebuild on the 16.6 release train targeted towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are looking for early feedback from custome...