Need 2911 Advance Security IOS.

Can Anyone please send em teh link from where I can donwload Cisco 2911 Advance Security IOS.
I have 2911 Universal k9 IOS installed on my 2911 router. I cant make VPN configuration using this IOS. I also cannot create PPPOE configuration on the Interface connected to DSL.

Can anybody Help?


Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Hi, you would need a Cisco support agreement to get updated IOS. Do you have this?
regards, Mark
alibahrian110Author Commented:
Hi uanmi.

I purchased the router from on eof teh Cisco distributer. Dono If we have Cisco Support agreement.
Like all other IOS available on net. Cant I download it from net?
Secondly I am unable to configure PPPOE on the router. I does support L2TP. Do I have to update IOS or need to add module??
Normally with Cisco equipment when you purchase the equipment you also need to purchase a support agreement - this adds to the cost.

Are you trying to use the router to connect to the Internet? you mention L2TP - so do you mean you want to configure PPTP for VPN access?

regards, Mark
SolarWinds® Network Configuration Manager (NCM)

SolarWinds® Network Configuration Manager brings structure and peace of mind to configuration management. Bulk config deployment, automatic backups, change detection, vulnerability assessments, and config change templates reduce the time needed for repetitive tasks.

alibahrian110Author Commented:
Ok I will look into teh Support issue.

I am trying to configure PPPOE on my DSL Interface. when I try to create a dialer, it shoes only L2TP not PPPOE. My DSL uses PPPOE to connect to the Internet.

Now Do I need to add Module or just need to upgrade the IOS?
Hi, you should not need to add a module or upgrade the IOS to get this to work. How are you trying to configure the DSL connection?

L2TP is normally associated with VPN connections, so you may be in the wrong area of the setup.
regards, Mark
alibahrian110Author Commented:
Thx fo rteh prompt reply. Following is teh command that I type.

vpdn enable

vpdn-group pppoe
protocol ??????? over here, it doesnot show PPPOE , when I press the ? mark.


Hi, have a look at this page

let me know if this is not helpful.

regards, mark
Istvan KalmarHead of IT Security Division Commented:

All 2911 coming same IOS, only that you need to buy license, and enable seurity feature:



    * Cisco 2900 Series Integrated Services Routers Data Sheet

Cisco® 2900 Series Integrated Services Routers build on 25 years of Cisco innovation and product leadership. The new platforms are architected to enable the next phase of branch-office evolution, providing rich media collaboration and virtualization to the branch while maximizing operational cost savings The Integrated Services Routers Generation 2 platforms are future-enabled with multi-core CPUs, support for high capacity DSPs (Digital Signal Processors) for future enhanced video capabilities, high powered service modules with improved availability, Gigabit Ethernet switching with enhanced POE, and new energy monitoring and control capabilities while enhancing overall system performance. Additionally, a new Cisco IOS® Software Universal image and Services Ready Engine module enable you to decouple the deployment of hardware and software, providing a flexible technology foundation which can quickly adapt to evolving network requirements. Overall, the Cisco 2900 Series offer unparalleled total cost of ownership savings and network agility through the intelligent integration of market leading security, unified communications, wireless, and application services.

Figure 1. Cisco 2900 Series Integrated Services Routers

Product Overview
Cisco 2900 Series builds on the best-in-class offering of the existing Cisco 2800 Series Integrated Services Routers by offering four platforms (Figure 1): the Cisco 2901, 2911, 2921, and 2951 Integrated Services Routers.
All Cisco 2900 Series Integrated Services Routers offer embedded hardware encryption acceleration, voice- and video-capable digital signal processor (DSP) slots, optional firewall, intrusion prevention, call processing, voicemail, and application services. In addition, the platforms support the industries widest range of wired and wireless connectivity options such as T1/E1, T3/E3, xDSL, copper and fiber GE.

Key Business Benefits
The Integrated Services Routers Generation 2 (ISR G2) provide superior services integration and agility. Designed for scalability, the modular architecture of these platforms enables you to grow and adapt with your business needs. Table 1 lists the business benefits of the Cisco 2900 Series.

Table 1. Key Business Benefits of the Cisco 2900 Series Integrated Services Routers.



Services integration
• The Cisco 2900 Series ISRs offer increased levels of services integration with voice, video, security, wireless, mobility, and data services, enabling greater efficiencies and cost savings.

Services On Demand
• A single Cisco IOS® Software Universal image is installed on each ISR G2. The Universal image contains all of the Cisco IOS technology sets which can be activated with a software license. This allows your business to quickly deploy advanced features without downloading a new IOS image. Additionally, larger default memory is included to support the new capabilities.
• The Cisco Services Ready Engine (SRE) enables a new operational model which allows you to reduce capital expenditures (CapEx) and deploy a variety of application services as needed on a single integrated compute services module.

High performance with integrated services
• The Cisco 2900 Series enables deployment in high speed WAN environments with concurrent services enabled up to 75 Mbps.
• A multigigabit fabric (MGF) enables high-bandwidth module-to-module communication without compromising routing performance.

Network agility
• Designed to address customer business requirements, the Cisco 2900 Series modular architecture offers increased capacity and performance as your network needs grow.
• Modular interfaces offer increased bandwidth, a diversity of connection options, and network resiliency.

Energy efficiency
• The Cisco 2900 Series architecture provides energy-saving features that include the following:
• The Cisco 2900 Series offers intelligent power management and allows the customer to control power to the modules based on the time of day. Cisco EnergyWise technology will be supported in the future.
• Services integration and modularity on a single platform performing multiple functions, optimizes raw materials consumption and energy usage.
• Platform flexibility and ongoing development of both hardware and software capabilities lead to a longer product lifecycle, lowering all aspects of the total cost of ownership, including materials and energy use.
• High efficiency power supplies are provided with each platform.

Investment protection
• The Cisco 2900 Series maximizes investment protection:
• Reuse of a broad array of existing modules supported on the original Integrated Services Routers provides a lower cost of ownership
• A rich set of Cisco IOS Software features carried forward from the original Integrated Services Routers and delivered in a single universal image.
• Flexibility to adapt as your business needs evolve.

Platform Architecture and Modularity
The Cisco 2900 Series is architected to meet the application demands of today's branch offices with design flexibility for future applications. The modular architecture is designed to support increasing bandwidth requirements, time-division multiplexing (TDM) interconnections, and fully integrated power distribution to modules supporting 802.3af Power over Ethernet (PoE) and Cisco Enhanced PoE (ePoE). Table 2 lists the architectural features and benefits of the Cisco 2900 Series.

Table 2. Architectural Features and Benefits

Architectural Feature


Modular platform
• The Cisco 2900 Series ISRs are highly modular platforms with several types of module slots to add connectivity and services for varied branch-office network requirements.
• The ISRs offer an industry-leading breadth of LAN and WAN connectivity options through modules to accommodate field upgrades for future technologies without requiring a platform replacement.

• The Cisco 2900 Series are powered by high-performance multi-core processors that can support the growing demands of high-speed WAN connections to the branch-office while also running multiple concurrent services.

Embedded IP Security with Security Sockets Layer (IPSec/SSL) VPN hardware acceleration
• Embedded hardware encryption acceleration is enhanced to provide higher scalability, which combined with an optional Cisco IOS Security license, enables WAN link security and VPN services (both IPSec and SSL acceleration).
• The onboard encryption hardware replaces and outperforms the advanced integration modules (AIMs) of previous generations.

Multigigabit fabric (MGF)
• The Cisco 2900 Series introduces an innovative multigigabit fabric (MGF) that allows for efficient module-to-module communication, enabling tighter services interactions across modules while reducing the overhead on the route processor.

TDM interconnectivity fabric
• Unified communications services in the branch office are significantly enhanced with the use of a TDM interconnectivity fabric in the system architecture, allowing for scaling of DS-0 channel capacity.

Integrated Gigabit Ethernet ports
• All onboard WAN ports are 10/100/1000 Gigabit Ethernet WAN routed ports.
• One of the three 10/100/1000 Ethernet WAN ports on the Cisco 2921 and 2951 supports Small Form-Factor Pluggable (SFP)-based connectivity in lieu of a RJ-45 port and enabling fiber connectivity.

Innovative universal-serial-bus (USB)-based console access
• A new, innovative USB console port offers management connectivity for devices without a serial port such as modern laptop computers.
• Traditional console and auxiliary ports are also available.

Optional integrated power supply for distribution of PoE and universal DC power supply
• An optional upgrade to the internal power supply provides inline power (802.3af-compliant PoE and Cisco Inline Power) to integrated switch modules.
• On the Cisco 2911, 2921, and 2951, an optional DC power supply will be available in the future that extends deployment into central offices and industrial environments.

Optional External Redundant Power Supply (RPS)
• The Cisco 2911, 2921, and 2951 allow for power redundancy through the use of an external RPS device, thereby decreasing network downtime and protecting the network from power-supply failures.
• Redundant power on the Cisco 2900 Series is supported through the Cisco RPS 2300 Redundant Power System. You can use the Cisco RPS 2300 to provide redundant power for Cisco 2900 Series ISRs as well as Cisco Catalyst® switches.
• In order to use the Cisco RPS 2300, an external RPS adapter is required (configurable option) to connect the platform to the external RPS.

PoE Boost
• When connected to an external RPS device, the Cisco 2911, 2921, and 2951 can operate in a PoE boost configuration in lieu of redundant power mode-whereby the power capacity of the platform is increased to twice the normal level to power additional PoE ports.

Designed for Flexible Deployments
• The Cisco 2911 and 2951 are designed for NEBS environments
• The 2911 is 12" deep and has an optional fan filter for deployments in a variety of environments. An assembly that provides front-to-back airflow is also available for 23" racks.

Modularity Features and Benefits
The Cisco 2900 Series provides significantly enhanced modular capabilities (refer to Table 3) offering investment protection for customers. Most of the modules available on previous generations of Cisco routers, such as the Cisco 2800 Series, are supported on the Cisco 2900 Series. Additionally, modules can be used on other supported Cisco platforms to provide maximum investment protection. Taking advantage of common interface cards across a network greatly reduces the complexity of managing inventory requirements, implementing large network rollouts, and maintaining configurations across a variety of branch-office sizes.
A complete list of supported modules, including a list of supported SFPs for the Cisco 2900 Series, is available at:

Table 3. Modularity Features and Benefits

ISR Modules


Cisco Service Module
• Each service module slot offers high-data-throughput capability:
• Up to 4 Gbps aggregate toward the route processor
• Up to 2 Gbps aggregate to other module slots over MGF
• Service module (SM) slots are highly flexible with support for double-wide service modules (SM-D's), which are Service Modules that require two SM slots. SM-Ds in the Cisco 2921 and 2951 provide flexibility for higher-density modules.
• A service module slot replaces the network module and the extension module for voice/fax (EVM) slots and is offered on Cisco 2911, 2921, and 2951 ISRs.
• An adapter module enables backward compatibility with existing network modules, enhanced network modules (NMEs), and EVMs.
• Service module slots provide twice the power capabilities relative to the network-module slots, allowing for flexibility for higher-scale and better-performance modules.
• Power to service module slots can be managed by extensions similar to the Cisco EnergyWise framework, so your organization can reduce energy consumption in your network infrastructure. Full EnergyWise support will be available in future software releases.

Cisco Enhanced High-Speed WAN Interface Card (EHWIC)
• The EHWIC slot provides enhancements to the prior generation's high-speed WAN interface card (HWIC) slots while provide maximum investment protection by natively supporting HWICs, WAN interface cards (WICs), voice interface cards (VICs), and voice/WAN interface cards (VWICs).
• Four integrated EHWIC slots on the Cisco 2901, 2911, 2921, and 2951 allow for more flexible configurations.
• Each HWIC slot offers high-data-throughput capability:
• Up to 1.6 Gbps aggregate toward the route processor
• Up to 2 Gbps aggregate to other module slots over the MGF
• Flexibility to support double-wide modules is enabled by combining two EHWIC slots. Up to 2 double-wide HWIC (HWIC-D) modules are supported.

Cisco Internal Services Module (ISM)

A single ISM slot provides flexibility to integrate intelligent service modules on an internal slot within the chassis
• Each ISM slot offers high-data-throughput capability:
• Up to 4 Gbps aggregate toward the route processor
• Up to 2 Gbps aggregate to other module slots over the MGF
• The ISM replaces the AIM slot; existing AIM modules are not supported in the ISM slot.
• Power to ISM slots can be managed by extensions similar to the Cisco EnergyWise framework, so your organization can reduce energy consumption in your network infrastructure. Full EnergyWise support will be available in future software releases.

Cisco High-Density Packet Voice Digital Signal Processor (DSP) Module (PVDM3) slots on motherboard
• PVDM3 slots natively support PVDM3 modules, providing support for richer density for rich-media voice and video.
• Each PVDM3 slot connects back to the system architecture through a 2 Gbps aggregate link through the MGF.
• Investment protection for PVDM2 modules is supported through an adapter module.
• Power to the PVDM slots can be managed by extensions similar to the Cisco EnergyWise framework, so your organization can reduce energy consumption in your network infrastructure. Full EnergyWise support will be available in future software releases.

Compact Flash slots
• Two external Compact Flash slots are available on the Cisco 2900 Series Integrated Services Routers. Each slot can support high-speed storage densities upgradeable to 4 GB in density.

USB 2.0 ports
• Two high-speed USB 2.0 ports are supported. The USB ports enable secure token capabilities and storage.

Cisco IOS Software
Cisco 2900 Series Integrated Services Routers deliver innovative technologies running on industry-leading Cisco IOS Software. Developed for wide deployment in the world's most demanding enterprise, access, and service provider networks, the Integrated Services Routers Generation 2 platforms are supported on Cisco IOS Software releases 15M&T. Release 15.0(1)M is available immediately and provides support for a comprehensive portfolio of Cisco technologies, including the functionality and features delivered in releases 12.4 and 12.4T. New innovations in 15.0(1)M span multiple technology areas, including security, voice, high availability, IP Routing and Multicast, quality of service (QoS), IP Mobility, Multiprotocol Label Switching (MPLS), VPNs, and embedded management.

Cisco IOS Software Licensing and Packaging
A single Cisco IOS Universal image encompassing all IOS technology feature sets is delivered with the platforms. You can enable advanced features by activating a software license on the Universal image. In previous generations of access routers, these feature sets required you to download a new software image. Technology packages and feature licenses, enabled through the Cisco software licensing infrastructure, simplify software delivery and decrease the operational costs of deploying new features.
Four major technology licenses are available on the Cisco 2900 Series Integrated Services Routers; you can activate the licenses through the Cisco software activation process identified at The four licenses are as follows:

• IP Base: This technology package is available as default.

• Data

• Unified Communications

• Security (SEC) or Security with No Payload Encryption (SEC-NPE)
For additional information and details about Cisco IOS Software licensing and packaging on Cisco 2900 Series Integrated Services Routers, please visit

vpdn group command not need your router!!!
alibahrian110Author Commented:
@Uanmi- Indeed its a very gud doc. I went through all the commands. The moment I type protocol and ? for help it doesnot show PPPOE in teh help, which means PPPOE is not supported.

@ikalmar- I went to teh Data Sheet as well. I know that 2911 supports PPPOE but how can I get it done on my router. I have no Idea. I have 2911 ISR routre and IOS is UNIVERSALk9. How can I configure PPPOE with teh spec I just mentioned is still a Mystery.
I recommend you look at using the PC software Cisco Configuration Professional and use this to configure your device.

Ikalmar should not be copying copyright material and publishing it here so it is best to look at the actual Cisco product page here

regards, Mark

I should mention that the cisco configuration professional is free and easy to use for most cisco devices.

regards, Mark
here is a setup for a 2911 that has DSL working. Check it out and let me know if it helps

regards, Mark
alibahrian110Author Commented:
Hi Mark,

I appreciate all of your support.

I can do all the configuration once I get the PROTOCOL PPPOE in the config mode. The thing is I do get PPPOE when I type protocol in config mode.

Interesting thing is I managed to configure PPPOE on ASA5510. It has 8.0 version installed and has only Ethernet Ports. No special module in it.

Why I dont get PPPOE option in Config mode when I type PROTOCOL and press ? for help.



Hi Ali,

I'm not sure why the PPPOE does not come up. I would enter the commands that you need based on this config

then see if your setup works.

also, get Cisco config pro going. I know most people like to use the command line, but I find this app to be useful as it will give you hints and let you know when things need to be done.

regards, Mark
alibahrian110Author Commented:
Hi Mark,

I am doing the config again according to the link you have just provided. Will get back to you.

Thanks for that Application as well. Try to use it.


Istvan KalmarHead of IT Security Division Commented:

The link is good, only that you need to change "Ethernet" to "Gigabit" on the example config

this lines are not need:

router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
router(config)#vpdn enable
router(config)#vpdn-group 1
router(config-vpdn)#protocol pppoe
ikalmar, thank you for again posting the same comments. The setup shown on this webpage is more appropriate as it is about a 2911 router and indicates the setup works.

regards, Mark

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Istvan KalmarHead of IT Security Division Commented:
you able to troublesoot the PPPoE problem with:

conf t
logg buff deb
logg buff 10000

deb ppp neg
deb ppp aut

ter mon
alibahrian110Author Commented:
Hi Mark,

Thank you for the link. The mystery has been solved. I followed the Cisco Support Community Forum and got the solution.

I appreciate your support mate.


It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.