SSH version 2 not supported on cisco 3560 g switch

[Sandipan Khatke]

Hi,

Is SSH v2 feature is supported on cisco 3560G switch for below image if no please let us know the latest image .

c3560-ipbase-mz.122-35.SE5/c3560-ipbase-mz.122-35.SE5.bin)

BR,

Sandip

[Peter Paluch]

Hello Sandip,

The Catalyst 3560 switches support SSH but your IOS is too outdated and also, it is an IOS version that intentionally lacks strong cryptographic features such as SSH (it is called "IP BASE W/O CRYPTO" - that's why you have no SSH support).

The most recent IOS version for your switch is either 15.0(2)SE if your switch has 32MB of FLASH memory, or 12.2(55)SE6 if your switch has 16MB of FLASH memory. Be careful to order the IOS whose name contains a "k9" - that is a designation that it contains strong crypto features, i.e.:

c3560-ipbasek9-mz.122-55.SE6.bin

c3560-ipbasek9-mz.150-2.SE.bin

Best regards,

Peter

[Sandipan Khatke]

Thanks Peter for your resonse

I agree with you but have a little bit confusion ,Is above IOS version will support SSH version 2

Thanks in advance

BR// Sandip

[Peter Paluch · Accepted solution]

Hello Sandip,

As Alessio correctly noted (thanks, Alessio!), yes, these IOS versions will definitely support SSHv2. Make sure you configure your switches using the ip ssh version 2 global configuration command.

You can always verify the particular supported features of an IOS using the Cisco Feature Navigator at http://cisco.com/go/fn - click on the "Search by Image" link and paste the IOS name into the form.

Best regards,

Peter

[Alessio Andreoli · Accepted solution]

Hi Sandpan,

it definitely supports SSHv2. Adding a note to Peter's post, i was using SSHv2 on a 3560G with a 12.2(44) in one of the previous ISP where i was working for. Remember to verify in the IOS you set that the OS doesn't "fall back" to SSHv1.5 because some of them do it.

Take Care

Alessio

[mvsheik123]

I second that. I recently upgraded few 3560 switches to 122-55.SE6 and SSH 2 works just fine.

hth

MS

[Sandipan Khatke]

Thanks Ales

We can use above IOS version for the same. Please let us know is below IOS version is okay for SSH V2

c3560e-universalk9-mz.122-55.SE.bin.

Good day

BR//Sandip

[Alessio Andreoli]

Hi Sandipan,

i have never implemented this specific version but there is an easy test for checking whether the SSH sessions falls back to SSHv1.5 or not. Just download putty and set the following:

you set "2 only" and then you open a session with your switch. nice test that is required during security audit.

Hope this helps

Alessio

[Sandipan Khatke]

HI,

Good Day ...

As per Cisco nevigator, above said IOS version not supported to SSH v2 ...Can you recheck and confirm again which IOS version will be support to SSH v2.

BR//Sandip

[Peter Paluch]

Sandip,

The Feature Navigator seems to talk nonsense. I've just checked it with both 12.2(55)SE6 and 15.0(2)SE IP SERVICES IOSes that I have around, and both support both client and server SSHv2. I believe that IP BASE will have the same support.

Best regards,

Peter

[Sandipan Khatke]

Hi,

Good Morning & Nice to see you over it again.....:)

Can you give me any artifacts so that same I can share with my client.

BR//Sandip

[Peter Paluch]

Hi Sandip,

Can you give me any artifacts so that same I can share with my client.

I am sorry, I do not understand this requirement. Can you say it in different words please?

Best regards,

Peter