07-12-2021 05:35 PM
Hi,
I recently purchased a catalyst 3560 switch and found it does not have SSH/crypto enabled on it.
Is there any easy way to upgrade this so I can get SSH to work on it?
Thank you for any help
Solved! Go to Solution.
07-12-2021 06:57 PM
I guess your IOS does not support the crypto command.
The K9 code means that your IOS image contains the crypto support. If the K9 is not shown (i.e. it says IPBASE-M or IPSERVICES-M only) then your IOS does not have the crypto feature set and you will need to upgrade it.
The image name containing the keyword "K9" should support crypto, ip ssh commands, for example (C3560-IPBASEK9-M)
07-12-2021 05:46 PM
what is the current IOS running, can you post show version.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn
here is the configuration guide :
07-12-2021 06:57 PM
I guess your IOS does not support the crypto command.
The K9 code means that your IOS image contains the crypto support. If the K9 is not shown (i.e. it says IPBASE-M or IPSERVICES-M only) then your IOS does not have the crypto feature set and you will need to upgrade it.
The image name containing the keyword "K9" should support crypto, ip ssh commands, for example (C3560-IPBASEK9-M)
07-12-2021 07:27 PM - edited 07-12-2021 10:37 PM
Is there anyway to upgrade it to support SSH or crypto command? It does say IPBASE-M but can I reinstall a different iOS that does support it or upgrade it in any way?
EDIT: So I found the iOS download page and there are a couple different files to choose from. iOS 15 and an iOS 12 not sure which one is the one needed. But it looks like all of them have a k9 in them. Currently I guess i have the 12.2 installed but no k9 for some reason which is weird. Will any one of them work?
https://software.cisco.com/download/home/282526526/type/280805680/release/15.0.2-SE11?i=!pp
https://software.cisco.com/download/home/282526526/type/280805680/release/12.2.55-SE12?i=!pp
EDIT 2: found my version by looking at my switch model and compared versions to the ones in downloads. (12.2.55SE12)
Had to delete my old flash to upload the new one due to insufficient space.
07-13-2021 12:40 AM
Yes, K9 IOS is required. Generally, the space of the switch is insufficient. The original mirroring needs to be deleted. Once the K9 IOS is installed successfully, it should all support the crypto command, and then the ssh function can be configured.
07-13-2021 01:44 AM
Base License now support the feature you looking, So to install secure image, you need to uplift the License model
or stay with telnet by securing the device in the environment. also if you intenet to go. delete the old image from device and upload new image for upgrade process.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide