Enabling VPN on Cisco 827H Router/IOS image upgrade

Posted on 2003-12-09
Medium Priority
Last Modified: 2008-01-09
Forgive me if this is obvious, but I'm only new to it.

I have recently purchased a CISCO 827H ADSL ROUTER  and in the description it stated that it had VPN access but after I installed the router and selected the VPN page it states that the router does not support this feature.
However, the cisco website states clearly that the router DOES support VPN.
I have been by one of the Cisco representatives that I may have to download a new IOS image to enable VPN, but if anyone of you has tried that, then you will know that with all the available images, it is a little confusing. I must admit, I do not know which one to pick.
Also with upgrading, what is the TFTP server?

I have enabled PAT on the router. That could not be the problem, could it??

Can you let me know how/if I can have the VPN access enabled as this was then main reason why I purchased this router.

First lines of show version:
Cisco Internetwork Operating System Software
IOS (tm) C820 Software (C820-OY6-M), Version 12.2(4)YA4, EARLY

Let me know if there is anything else you require to help out.

Thanks in advance,

Question by:Glenhomes
  • 2

Expert Comment

ID: 9904983
The 827H supports "Easy VPN" and IPSEC VPNs as described by the following URLs:




You need to have IPSEC capable software installed in the router to have access to these features.
The router "supports" the software, and the software can be installed, but they charge extra for the "Feature Pack" unless you purchased the router with the feature originally.  You may have purchased the router with the firewall+IPSEC option already installed - otherwise you may have to purchase an upgrade.

Log into the router and type "show version"

Look at the filename of the software you have installed.  Cisco has a set of characters in the filename that identify the software features.  For example:

c820-k9osy6-mz.122-15.T9.bin is a software image filename for your router that supports IPSEC
c820-sy6-mz.122-15.T9.bin  is a software image that does not.

Look for the "k9" in the name.

Here is a URL that describes the feature letters in the name:


To download the software, you need to register with Cisco: http://tools.cisco.com/RPF/register/register.do

Here is the link for the router documentation:


And here is the specific section on upgrading the software and TFTP:


Check your software version as I described, and if it is not the right one, check the above upgrade link.


Author Comment

ID: 9905273
Thanks for the response.

As said before, my show version displays:

ROM: System Bootstrap, Version 12.2(4r)XM2, RELEASE SOFTWARE (fc1)
ROM: C820 Software (C820-OY6-M), Version 12.2(4)YA4, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
System image file is "flash:c820-oy6-mz.122-4.YA4.bin"

I take it that I have not got IPSEC capable software installed. This is really wierd as I thought it would come built into the router.

I have already registered with Cisco, but unfortunately cannot download any software. I'm having trouble picking the correct option during the registration process for additional access,since I purchased the router from a reseller.(I know this sounds silly, but it's also frustrating).
Looks like I'm going to have to purchase an upgrade either way.

Let me know if there is anything else I should consider, otherwise you are on your way to maximum points!



Accepted Solution

nickswanjan earned 2000 total points
ID: 9905584
Right - the version you are currently running does not support IPSEC.

It can be very confusing - products are advertised as VPN capable or VPN ready but they don't come with the option actually included.  It could be worse - lowly 4-port hubs or dialup modems are sometimes advertised as VPN ready....yes, they will pass VPN traffic...

To get software download access, you need to have a service contract or you need "Special Access" from a technical support rep.  This only gets you updates to the version you originally purchased though.  Your reseller should be able to give you a price for the upgrade or they may have a package deal that includes IPSEC.

Good luck!


Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The Cisco RV042 router is a popular small network interfacing device that is often used as an internet gateway. Network administrators need to get at the management interface to make settings, change passwords, etc. This access is generally done usi…
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

609 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question