CISCO1941/K9

What countries are classified license-free zones?

Countries belonging to the EU license-free zone include Australia, Austria, Belgium, Bulgaria, Canada, Cypress, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Japan, Latvia, Lithuania, Luxembourg, Malta, Netherlands, New Zealand, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey, United Kingdom, and the United States.

On the Cisco ISR G2 routers with the SEC-K9 license, what tunnel count and performance throughput are available?

The SEC-K9 permanent licenses apply to the Cisco 1900, 2900, and 3900 ISR G2 platforms; these licenses limit all encrypted tunnel counts to 225 tunnels maximum for IP Security (IPsec), Secure Sockets Layer VPN (SSL VPN), a secure time-division multiplexing (TDM) gateway, and secure Cisco Unified Border Element (CUBE) and 1000 tunnels for Transport Layer Security (TLS) sessions. The SEC-K9 license limits encrypted throughput to less than or equal to 85-Mbps unidirectional traffic in or out of the ISR G2 router, with a bidirectional total of 170 Mbps. This requirement applies for the Cisco 1900, 2900, and 3900 ISR G2 platforms.

Why do I need to purchase the SEC-K9 license as a spare?

If you purchase a Cisco ISR G2 chassis and later decide to turn on security features, you must buy a SEC-K9 license. The administrator must download the license to the router and follow the license installation instructions that come with the license to be able to use the security features on the router.

If I purchased a Cisco ISR G2 router on Cisco IOS Software Release 15.0(1) M before the limitation was imposed, what should I do? And should I need to upgrade my Cisco IOS Software?

Assuming that you already have purchased the securityk9 package for encryption, you must purchase a HSEC-K9 license as a spare.

I have bought new 1941 router and i have installed a new EHWIC-4ESG card to it, but unfortunately it is not being detected.

What IOS are you using? You need a minimum of 15.1(2)T.

We are looking to put Cisco routers into some client sites. Was looking at 1841's but they are end of life now I believe, can someone recommend an alternative / or it's replacement?

The 1941 is the successor to the 1841. However, new devices are faster, so you might be able to "downsize". For example, an 1841 is rated at 75 Kpps while a 890 is rated at 100 Kpps. Conversely, many new WAN circuits provide much more bandwidth then we usually obtained via TDM. If using such, you might need the faster successor or even a faster device.

We are receiving low internet upload speed (6-8Mps) at our office location. The download speed is good (50Mbps).
Got in contact with the ISP Comcast and tried testing it bypassing our internal n/w i.e. connecting my laptop directly to Cienna (Comcast GW) and both speeds were around 50Mbps. Testing the same through my router the speed goes down. Just the Upload speed. Could there be a configuration in our router thats causing this? FYI on the internet interface the settings are 'Duplex full 'Speed auto

Clear the counters and change the speed and duplex to auto/auto.

What is the basic setup required to configure 3 ISPs on a router interface?

I would say that these are the basic steps for setting up 3 ISP on a single router. - decide which interface will be for which ISP. - obtain IP addressing information from each ISP. - configure appropriate IP address and subnet mask on each of the ISP interfaces. - configure address translation for each of the 3 ISP interfaces. - determine what approach you will use for routing. Will it be static routes or some dynamic routing protocol, or some mix of these? - implement the appropriate routing solution for each of the ISP.

In site to site VPN, we know both end IP address, we assigned set peer cmd. If the interface are configured with DHCP(ISP), we don't know the interface IP address. At this scenario, how to configure site to site vpn. In remote VPN, how to configure remote VPN in cisco router. How to provide IP address dynamically to client host.

Don't know if it can be used with a single site-to-site VPN, but DMVPN can use NHRP to support non-hub with dynamic tunnel IPs. The client is configured with a hub's IP, and it uses NHRP to register its public IP with the hub. The hub then "knows" the remote IP. (NB: it also supports the remote IP being changed.)

I bought a 1941W but i bought it with just IPBASE license and now in need of the securityk9 and SSL VPN for it. I just want to confirm that what Im purchasing is for an IOS with payload encryption. I’m just looking for SSL for upto 10 users.

SL-19-SEC-K9 & FL-SSLVPN10-K9 are either needed.

I am looking at the pictures of Cisco1941-k9, but on the back of the router, I don't see a Fiber input from my ISP Provider and Fiber output for my switch.Well, this is what I am going to get from my ISP. They will provide me a dedicated internet connection with a Fiber cable into my office. And it will be Internet only or data only. So, input in router will be Fiber and output from router should also be Fiber to my switch.

Do not worry, HWIC-1GE-SFP GigE High Speed WIC with One SFP Slot and EHWIC-1GE-SFP-CU are designed for your problem. They can add SFP ports to 1900 2900 & 3900 Series Routers.

1941/K9 that I would wish to make to support for VPN?

That depends, if you want to setup IPSec VPN, you would need SL-19-SEC-K9 or l-sl-19-sec-k9 license; if you want to use SSL VPN, you should buy a fl-sslvpn**-k9, the number depends on your SSL users.

Which CISCO router is suitable as gateway router for medium size organization of about 80 client computers connected to the internet?

Cisco1900 Series Router is OK.