Switch software and firmware

[davonta-neal]

Hello, I'm a new engineering intern currently working on an asset list for our different network devices. My question is how do I identify the correct software and firmware my cisco switch should use?

[M02@rt37]

Hello @davonta-neal 

Cisco designate certain IOS versions as “suggested / Gold star releases”, which are tested and considered most stable for production use...

Each recomended version has a release notes document that tell you and talk about known issues and resolved bugs regarding versions...depend on the models, the release note will tell you if direct upgrade is supported or if you need to step through an intermediate version !

[david467]

Hi @davonta-neal, welcome to the world of network devices! 🙂

To identify the correct software and firmware for a Cisco switch:

1. Check the switch model – Look at the exact model number (e.g., Catalyst 9300-24T). This is critical because firmware/software is model-specific.

2. Visit Cisco’s Software Download page – Go to Cisco’s official software site and enter your model.

3. Read the release notes – Cisco release notes tell you which firmware/software is recommended, compatible, and stable for your hardware and IOS version.

4. Check current running version – On the switch, run:

   show version

   This tells you the currently installed IOS version and firmware. Compare it with Cisco’s recommended releases.

5. Consider your network requirements – Some versions include new features or security patches. Pick the version that balances features and stability for your environment.

6. Document it – Keep a record of recommended versions per model in your asset list — this saves headaches later.

[davonta-neal]

Thanks for the advice and quick response.

[Rich R]

> 6. Document it – Keep a record of recommended versions per model in your asset list — this saves headaches later.

Actually that will not be enough because the recommendations change over time as new versions are released (and older versions become end of life) and security vulnerabilities get fixed, so that will need to be updated regularly.

Looking at the gold star releases on the download pages is a good starting point but most business units have more detailed guides on recommended releases for the specific platforms in question.  For example:
https://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-switches/214946-recommended-releases-for-catalyst-2960-3.html
https://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-xe-16/215567-recommended-releases-for-asr1000-isr400.html
https://www.cisco.com/c/en/us/support/docs/switches/catalyst-9300-series-switches/214814-recommended-releases-for-catalyst-9200-9.html
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/214749-tac-recommended-ios-xe-builds-for-wirele.html

And just because a version is recommended doesn't automatically mean it is the right version for you.  Every version has some bugs so ideally you should test all versions before deployment because there might be a bug which affects your particular config or use case.  With IOS-XE in general you should also be applying any relevant SMUs (patches) for the release you are using.  For 9800 series wireless you should also be applying the latest AP Service Pack (APSP) which updates the AP software version without changing the controller (WLC) software version.