Solved

Enabling VPN on Cisco 827H Router/IOS image upgrade

Posted on 2003-12-09
3
645 Views
Last Modified: 2008-01-09
Pros,
Forgive me if this is obvious, but I'm only new to it.

I have recently purchased a CISCO 827H ADSL ROUTER  and in the description it stated that it had VPN access but after I installed the router and selected the VPN page it states that the router does not support this feature.
However, the cisco website states clearly that the router DOES support VPN.
I have been by one of the Cisco representatives that I may have to download a new IOS image to enable VPN, but if anyone of you has tried that, then you will know that with all the available images, it is a little confusing. I must admit, I do not know which one to pick.
Also with upgrading, what is the TFTP server?

I have enabled PAT on the router. That could not be the problem, could it??

Can you let me know how/if I can have the VPN access enabled as this was then main reason why I purchased this router.

First lines of show version:
Cisco Internetwork Operating System Software
IOS (tm) C820 Software (C820-OY6-M), Version 12.2(4)YA4, EARLY

Let me know if there is anything else you require to help out.

Thanks in advance,
Glen

0
Comment
Question by:Glenhomes
  • 2
3 Comments
 
LVL 3

Expert Comment

by:nickswanjan
ID: 9904983
The 827H supports "Easy VPN" and IPSEC VPNs as described by the following URLs:

http://www.cisco.com/en/US/products/hw/routers/ps380/products_data_sheet09186a0080092161.html

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122limit/122y/122ya/122ya4/ftezvpcm.htm

http://www.cisco.com/en/US/products/hw/routers/ps380/products_configuration_guide_chapter09186a0080118cbb.html

You need to have IPSEC capable software installed in the router to have access to these features.
The router "supports" the software, and the software can be installed, but they charge extra for the "Feature Pack" unless you purchased the router with the feature originally.  You may have purchased the router with the firewall+IPSEC option already installed - otherwise you may have to purchase an upgrade.

Log into the router and type "show version"

Look at the filename of the software you have installed.  Cisco has a set of characters in the filename that identify the software features.  For example:

c820-k9osy6-mz.122-15.T9.bin is a software image filename for your router that supports IPSEC
c820-sy6-mz.122-15.T9.bin  is a software image that does not.

Look for the "k9" in the name.

Here is a URL that describes the feature letters in the name:

http://www.cisco.com/en/US/products/sw/iosswrel/ps1828/products_white_paper09186a00801ab747.shtml

To download the software, you need to register with Cisco: http://tools.cisco.com/RPF/register/register.do

Here is the link for the router documentation:

http://www.cisco.com/en/US/products/hw/routers/ps380/prod_technical_documentation.html

And here is the specific section on upgrading the software and TFTP:

http://www.cisco.com/en/US/products/hw/routers/ps380/products_tech_note09186a0080094b23.shtml

Check your software version as I described, and if it is not the right one, check the above upgrade link.

Nick
0
 

Author Comment

by:Glenhomes
ID: 9905273
Thanks for the response.

As said before, my show version displays:

ROM: System Bootstrap, Version 12.2(4r)XM2, RELEASE SOFTWARE (fc1)
ROM: C820 Software (C820-OY6-M), Version 12.2(4)YA4, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
System image file is "flash:c820-oy6-mz.122-4.YA4.bin"
.........

I take it that I have not got IPSEC capable software installed. This is really wierd as I thought it would come built into the router.

I have already registered with Cisco, but unfortunately cannot download any software. I'm having trouble picking the correct option during the registration process for additional access,since I purchased the router from a reseller.(I know this sounds silly, but it's also frustrating).
Looks like I'm going to have to purchase an upgrade either way.

Let me know if there is anything else I should consider, otherwise you are on your way to maximum points!

Glen

0
 
LVL 3

Accepted Solution

by:
nickswanjan earned 500 total points
ID: 9905584
Right - the version you are currently running does not support IPSEC.

It can be very confusing - products are advertised as VPN capable or VPN ready but they don't come with the option actually included.  It could be worse - lowly 4-port hubs or dialup modems are sometimes advertised as VPN ready....yes, they will pass VPN traffic...

To get software download access, you need to have a service contract or you need "Special Access" from a technical support rep.  This only gets you updates to the version you originally purchased though.  Your reseller should be able to give you a price for the upgrade or they may have a package deal that includes IPSEC.

Good luck!
Nick

0

Featured Post

Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

Join & Write a Comment

In a WLAN, anything you broadcast over the air can be intercepted.  By default a wireless network is wide open to all until security is configured. Even when security is configured information can still be intercepted! It is very important that you …
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now