I would like to know if I can setup ACLs with the access-list command with a Cisco ISR4321 V/K9. Are there restrictions (in comparison with a Cisco ISR4321 VSEC/K9)? Note the SEC part in the reference.

Can I setup a VPN IPsec ISAKMP between a Cisco ISR4321 V/K9 and another router like a Cisco 887VA SEC/K9 router?

Best regards.

1 Answer 1


Yes you can setup ACL on any Cisco IOS device, this is a base feature.

Regarding the VPN, to my surprise, for the IRS4321, according to this datasheet it seems you need the Security (SEC) feature bundle to use IPsec VPN.

enter image description here

The Cisco 88VA SEC/K9 has Advance Security as default feature set and so supports IPsec VPN (see table 3 and 4 in this datasheet)

  • Thank you. I just do not understand why this is surprising to you. Can you explain? Is it surprising for an ISR? Commented Jan 17, 2018 at 15:41
  • Because in most Cisco devices I have worked with, IPsec VPN is a base feature that doen't require a specific bundle. And ISR stand for "Integrated Service Router". The fact that such a basic service is not integrated strikes me.
    – JFL
    Commented Jan 17, 2018 at 15:44
  • Well, not everyone says it is not integrated... that is the problem. There is an uncertainty. Commented Jan 17, 2018 at 16:12
  • to further add to the uncertainty, on some Cisco platforms, a service normally activated by a license actually works without the license. You technically can use it but legally can't.
    – JFL
    Commented Jan 17, 2018 at 16:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.