WS-C3850-24P OS/Firmaware

[QT76]

Hi all,

i get a cisco switch, model WS-C3850-24P, and when i'm looking for a OS/firmware update i have to chose between:

Catalyst 3850-24P-E Switch

Catalyst 3850-24P-L Switch

Catalyst 3850-24P-S Switch

but with show version i get just only "WS-C3850-24P". Which one i have to choose?

Thanks

[balaji.bandi]

Image  is universal so download from below link the stable cisco 5star

cat3k_caa-universalk9.16.12.10a.SPA.bin

https://software.cisco.com/download/home/284455435/type/282046477/release/Gibraltar-16.12.10a

[QT76]

Thanks! Oke Now i have two choices:

CAT3850/3650 UNIVERSAL

or 

CAT3850/3650 UNIVERSAL W/O DTLS

Which one? What is he difference?

[Leo Laohoo]

Pick Universal.

[balaji.bandi]

i have provided the image name - cat3k_caa-universalk9.16.12.10a.SPA.bin

[QT76]

thanks, i did. Now i have the newst version cat3k_caa-universalk9.16.12.11.SPA.bin installed. Everything is working but now i cannot access the webui. i get this message:

%WEBSERVER-5-LOGIN_FAILED: Switch 1 R0/0: nginx: Login Un-Successful from host 192.168.13.21 using crypto cipher 'ECDHE-RSA-AES128-GCM-SHA256'

any help? Sorry im just a beginner..

[QT76]

..and when i reload, my config is gone...is very frustrating sometimes..

[balaji.bandi · Accepted solution]

May be you can try delete all old certs :

no crypto pki trustpoint TP-self-signed

no ip http

no ip http secure

Then config :

ip http

ip http secure

You can issue below command check the ciphers : 

show  ip http server all    

or you can also configure ciphers you want to :

ip http secure-ciphersuite  ? (give you options)

and when i reload, my config is gone...is very frustrating sometimes..

If you do not read the documents then you will go more fustration.

show version ( check the config register - setup correctly to retain the config).

config-register 0x102

no system ignore startupconfig

[QT76]

Thank you! 

config-register 0x102

no system ignore startupconfig

this resolced the config issue, but i still cannot access the webui, and i get the same response if i change the crypto cypher..

[QT76]

....i solved! i missed this command:

ip http authentication local

Thanks a lot for your help!

[balaji.bandi]

sure that is basic setup we expected to configure any one before accessing the GUI

but you are more showing logs about cipher, never showed the config.

Glad all good at end. good luck.

[QT76]

Thank you!

[marce1000]

  - Doesn't matter, take any of them and or the needed  (downloaded) firmware will be compatible , 

 M.