MD5 Checksum not on Cisco site

[kronster]

I need to verify an old image.

c3560c405ex-universalk9-mz.122-55.EX2.bin The file is no longer available for download. How can I verify the checksum?

[balaji.bandi]

upgrade to latest stable version suggested and cehck the MD5 the code already end of support, no long or point to install.

[kronster]

I understand. However, this switch was compromised. I am assessing what was done. I would like to verify if the image was tampered with.

[balaji.bandi]

sure agree, i do not have any answer for that, if you looking for backtrack ?

How one can comprimise the IOS., some one installed wrong IOS ? IOS by self it not going to compromise with few commands.

if some one gave wrong IOS to load on this kit, you may have records or part of your change control to investigate on this i guess.

but its all how much time you want to put in, what is the outcome you expecting out of it ?

[Leo Laohoo]

---

@kronster wrote:

However, this switch was compromised. I am assessing what was done. I would like to verify if the image was tampered with.

---

As I have explained in your other thread, please contact your AM/SE because they can reach out to the correct people.

[Leo Laohoo]

Do not even bother with this version of firmware because only the factory "deploys" this version.  

The "EX" are interim firmware and it is not meant to be deployed in production.  

[kronster]

The vstack was not disabled. In this version of IOS no vstack is not a valid command. 

[Leo Laohoo]

---

@kronster wrote:

The vstack was not disabled. In this version of IOS no vstack is not a valid command. 

---

For an old IOS, the correct command to disable SmartInstall is "no vstack config".