Sunday, April 19, 2020

2911 + ISM-VPN-29 + HSEC

Ok so yes this is an old piece of hardware, just trying to keep things running here. I've been gently encouraging this customer to move to a modern SSLVPN platform, but like many customers right now they're just trying to do the bare minimum.

So they've managed to find some source for an ISM-VPN-29 module to fit in their 2911 router. Probably eBay.

The module was installed, and the router boots without losing ANY of the magic smoke inside, which is a lovely blessing really.

However it won't activate.

I was adamant that we didn't need the L-FL-29-HSEC-K9 license, because of course that license is only for the 2921 and up routers. The HSEC license doesn't apply to the 2901 or 2911 because they're too shitty to even apply for HSEC.

Was I wrong? I get this error:

#sh logging | i ISM *Apr 20 01:34:59.655: %LINEPROTO-5-UPDOWN: Line protocol on Interface ISM VPN Accelerator, changed state to up *Apr 19 18:35:13.935 PST: %VPN_HW-1-INITFAIL: Slot 0: ISM-VPN module is disabled as hseck9 is not activated.Please install/activate the hseck9 license 

I think I've done everything I can to activate HSEC without an actual license, but it doesn't seem to have an eval mode or a RTU that I can activate. Maybe my brain really is covid-19 addled.

Any advice for a Sunday night idiot?



No comments:

Post a Comment