I'm currently debugging an issue with IPsec tunnels and it seems like one of our client's NW engineers didn't install the HSEC-K9 license.
The issue is that the new IPsec tunnels are not coming up even though both peers are rightly configured with all the necessary configurations.
While cross checking in the design specification document, I could see that the Licensing detail is mentioned as "U.S. Export Restriction Compliance license for 4400 series". It is also clearly mentioned to procure two licenses and to install the same in the core router.
I'm confused with the term here. Can someone confirm whether the "U.S. Export Restriction Compliance license for 4400 series" and HSEC-K9 License is same?
I can see the following error in the router console log. I have more or less confirmed that the this is the reason behind our issue.
Feb 22 10:48:53.170: %CERM-4-TUNNEL_LIMIT: Maximum tunnel limit of 225 reached for Crypto functionality with securityk9 technology package license.
show platform cerm-information doesn't seems to working in the router. The model is Cisco ISR4451-X/K9.
These are the only commands available in the router.
RT#show crypto ipsec ? policy Show IPSEC client policies profile Show ipsec profile information sa IPSEC SA table security-association Show parameters for IPSec security associations spi-lookup IPSEC SPI table transform-set Crypto transform sets