cisco switch

[ftaha]

Hello, 

I wanted to know if it is needed to upgrade cisco switches ios. Most of the switches are 2960,3560 and 3750 models. Most of them are on the 12.2 versions. according to the cisco software page, the recommended cisco ios for those are in the 12.2 range. Is it needed to upgrade them to the 15.x versions or is the 12.2 versions fine? thanks 

[Kasun Bandara]

@ftaha Hi, cisco releasing different OS versions with many improvements and new features. Unless you don't need specific new feature, you may continue with existing OS version. But in some cases, your OS may have vulnerabilities. in that case you better upgrade to fixed version. My personal recommend is upgrade to latest recommended OS with less security issues. You can see recommended OSs marked with yellow star in download page.

[ftaha]

thank you, I also wanted to ask about the advisories. On the recommended IOS some of them have an advisory with critical/high impact. could you explain on that. Should I still stick to the recommended OS even if it has a red advisory on it?

[balaji.bandi]

Most of the product should be end of life, Only new device with X  can go upto 15.X IOS code - that need to check with exact model of the device (since you mentioned generic Models - that not going to help for suggestion)

12.2 (55) that was latest code last i have used and after that i do not see any other version cisco released as i know.

since most of the new Code moved to 15.X  or IOS XE on the new devices.

Always check the download area with 5* image as cisco suggested, before upgrade make sure you read the release notes and understand the caveats.

[ftaha]

So the switch models I have based on the Show version command are the 3560-48PS. 356024PS, 2960x-24TS-L, 3750 -24P,3750-48P and 2960-24PC-L. Upon looking at the software download page. I see some switches written as 3750V2...etc.  Could you explain what that means. None of my switches have the V2 in the model number. I've inserted a photo for reference.

[balaji.bandi]

v2 is the model released version - some new software have universal image.

so make sure you choose the right model (based on the show version oputput) - putting wrong code will brick the device.

[ftaha]

alright so based on the show version command some of the switches are the 3650-24PS. does that mean I should install the 3560V2-24PS image for that switch? I just want to double check. 

[balaji.bandi]

yes that is correct - you can also read the release notes always give you what model IOS support:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12-2_58_se/release/notes/OL24337.html

[ftaha]

So this is the image file that is recommended (Gold start on it), however i notice the advisory on it. When clicking on it, it shows different critical and high impacts. Could you explain that? Thanks.

[balaji.bandi]

Since that Version not updated from 2017, so i am sure there is always vulenarable - if you looking latest fixes, then you need to uplift the models.

Note : some time you may be not using that feature, so in that case you can ignore.