Enabling VPN on Cisco 827H Router/IOS image upgrade

Posted on 2003-12-09
Last Modified: 2008-01-09
Forgive me if this is obvious, but I'm only new to it.

I have recently purchased a CISCO 827H ADSL ROUTER  and in the description it stated that it had VPN access but after I installed the router and selected the VPN page it states that the router does not support this feature.
However, the cisco website states clearly that the router DOES support VPN.
I have been by one of the Cisco representatives that I may have to download a new IOS image to enable VPN, but if anyone of you has tried that, then you will know that with all the available images, it is a little confusing. I must admit, I do not know which one to pick.
Also with upgrading, what is the TFTP server?

I have enabled PAT on the router. That could not be the problem, could it??

Can you let me know how/if I can have the VPN access enabled as this was then main reason why I purchased this router.

First lines of show version:
Cisco Internetwork Operating System Software
IOS (tm) C820 Software (C820-OY6-M), Version 12.2(4)YA4, EARLY

Let me know if there is anything else you require to help out.

Thanks in advance,

Question by:Glenhomes
  • 2

Expert Comment

ID: 9904983
The 827H supports "Easy VPN" and IPSEC VPNs as described by the following URLs:

You need to have IPSEC capable software installed in the router to have access to these features.
The router "supports" the software, and the software can be installed, but they charge extra for the "Feature Pack" unless you purchased the router with the feature originally.  You may have purchased the router with the firewall+IPSEC option already installed - otherwise you may have to purchase an upgrade.

Log into the router and type "show version"

Look at the filename of the software you have installed.  Cisco has a set of characters in the filename that identify the software features.  For example:

c820-k9osy6-mz.122-15.T9.bin is a software image filename for your router that supports IPSEC
c820-sy6-mz.122-15.T9.bin  is a software image that does not.

Look for the "k9" in the name.

Here is a URL that describes the feature letters in the name:

To download the software, you need to register with Cisco:

Here is the link for the router documentation:

And here is the specific section on upgrading the software and TFTP:

Check your software version as I described, and if it is not the right one, check the above upgrade link.


Author Comment

ID: 9905273
Thanks for the response.

As said before, my show version displays:

ROM: System Bootstrap, Version 12.2(4r)XM2, RELEASE SOFTWARE (fc1)
ROM: C820 Software (C820-OY6-M), Version 12.2(4)YA4, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
System image file is "flash:c820-oy6-mz.122-4.YA4.bin"

I take it that I have not got IPSEC capable software installed. This is really wierd as I thought it would come built into the router.

I have already registered with Cisco, but unfortunately cannot download any software. I'm having trouble picking the correct option during the registration process for additional access,since I purchased the router from a reseller.(I know this sounds silly, but it's also frustrating).
Looks like I'm going to have to purchase an upgrade either way.

Let me know if there is anything else I should consider, otherwise you are on your way to maximum points!



Accepted Solution

nickswanjan earned 500 total points
ID: 9905584
Right - the version you are currently running does not support IPSEC.

It can be very confusing - products are advertised as VPN capable or VPN ready but they don't come with the option actually included.  It could be worse - lowly 4-port hubs or dialup modems are sometimes advertised as VPN ready....yes, they will pass VPN traffic...

To get software download access, you need to have a service contract or you need "Special Access" from a technical support rep.  This only gets you updates to the version you originally purchased though.  Your reseller should be able to give you a price for the upgrade or they may have a package deal that includes IPSEC.

Good luck!


Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
High Receive Utilization on my Cisco 3560 V2 10 71
Is WiFi half-duplex or Full -duplex 4 50
Ping Through ASA Firewall 6 40
Choice of router 8 25
Hello , This is a short article on how would you go about enabling traceoptions on a Juniper router . Traceoptions are similar to Cisco debug commands but these traceoptions are implemented in Juniper networks router . The following demonstr…
Problem Description:   Couple of months ago we upgraded the ADSL line at our branch office from Home to Business line. The purpose of transforming the service to have static public IP’s. We were in need for public IP’s to publish our web resour…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question