SSH on 4506 & 2950

[right_guy12]

Hi!

I want to enable SSH access on my 4506 & 2950 switches. 4506s are using IOS version 12.2(18)EW3 and the 2950s are using IOS version 12.1(22)EA2. When I try and enter the command 'ip ssh' I get the error message "invalid marker..."

Which IOS version do I need to upgrade to? Please advice.

Thanks!

[ankurbhasin]

Hi Friend,

For 2950 you have to load a crypto image to support SSH which is c2950-i6k2l2q4-mz.12.1-22.EA2 for which DRAM requirement is 16 MB and Flash requirmeent is 8 MB

For 4506 you have to load a crypto image to support SSH which is cat4000-i9k91s-mz.12.2-18.EW3 (DRAM256/Flash64) .....This image is for cat4k with sup3 with feature set Basic L3 and 3DES.

You can also find all these details by going to feature navigator

http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp

then go to

Search by Software/Image Name/Product Code/Platform

then select the platform which you are having which means the type of switch and follw the steps and it will give you different images with different featyre sets,

HTH, if yes please rate the post

Ankur

[lgijssel]

Using ssh to access the switch is not a matter of running a recent version but merely of using the right feature set. When you check the upgrade planner, for the 4500 you will find a feature set called: IP BASE SSH. You will need at least that.

This may imply that you will need to buy a license from Cisco to use the new feature set. That depends on what you have at the moment.

I may be wrong on this but to my best knowledge, ssh is not available on the 2950 series.

Regards,

Leo

[ankurbhasin]

Hi Leo,

If we upgrade 2950 with crupto image it will support SSH

Regards,

Ankur

[lgijssel]

One always learns! ;-)

Thank you Ankur.

Leo

[right_guy12]

Hey!

Thanks for your help Ankur n Leo.

[right_guy12]

Hi! Ankur,

Just a li'l more help. How exactly do I decide upon which image to load. How do I come to know what kind of sup am I using exactly [ we have ws-x4515]. Also how would I transfer the image to the switch? Would it be by using Xmodem of hyperterminal?

Thanks!

[ankurbhasin]

Hi Friend,

WS-X4515 is Catalyst 4500 series switch Supervisor Engine IV.

To transfer the image you can simply use TFTP.

Check this link for full details on upgrading IOS on your sup 4.

http://www.cisc.com/univercd/cc/td/doc/product/lan/cat4000/12_1_12/ol_2170.htm

then click on

Upgrading the Cisco IOS Software

You will get all the details how to upgrade.

If you upload image cat4000-i9k91s-mz.12.2-18.EW3 (DRAM 256/ FLASH 64) it will work for sup 4 and you can configure SSH as this image has a feature set of Basic L3 and 3DNS but if you want enhance image you have to go for cat4000-i5k91s-mz.12.2-18.EW3 and this has a featyre set of Enhance L3 and 3DNS

HTH, if yes please rate the post.

Ankur

[right_guy12]

Thanks pal!

[andrew.butterworth]

You need the EI capablue 2950 to support the Crypto image. This isn't too clear in the documentation but if you attempt to load the crypto image on a SI-only 2950 it will install but won't boot.

[quote]Switches that support only the SI cannot run the cryptographic image. For more information, see the SI-only switches listed in Table 1 and the [/quote]

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat2950/12122ea7/ol8122.htm#wp37398

HTH

Andy

[right_guy12]

Thanks! Andy.

[axfood]

The new 12.1-22.EA7 c2950 SI image have ssh support.

That was about time Cisco.