ENABLE SSH on 3750g series switch

srikanth ath · ‎08-24-2011

hi all

iam looking to access my switch (3750g series VER: 12.2(35) SES) through ssh service . but couldnt as when iam looking to generate a RSA key pair it prompted like UNRECOGNISED COMMAND.

i went through the cisco articles and found that all 3750g series switch supports ssh service.

these all the commands i tried out , but everything vein, my company asking me to access switch through ssh. how should i do it now?

wavel3#conf t

Enter configuration commands, one per line. End with CNTL/Z.

wavel3(config)#

wavel3(config)#cry?

% Unrecognized command

wavel3(config)#crypto ?

% Unrecognized command

wavel3(config)#host ?

WORD This system's network name

wavel3(config)#hostnam

wavel3(config)#hostname wavel3

wavel3(config)#cry

wavel3(config)#cry?

% Unrecognized command

wavel3(config)#cry

wavel3(config)#ip ssh?

% Unrecognized command

wavel3(config)#ip ssh ?

% Unrecognized command

wavel3(config)#crypto ?

% Unrecognized command

wavel3(config)#crypto key generate rsa

^

% Invalid input detected at '^' marker.

wavel3(config)#line vty 0 4

wavel3(config-line)#transp

wavel3(config-line)#transport input ?

all All protocols

none No protocols

telnet TCP/IP Telnet protocol

how to enable ssh to my switch

are there any thoughts.

thanks in advance

srikanth

cadet alain · ‎08-24-2011

Hi,

Can you post sh ver output.

if you've got a k9 image it should work.

Regards.

Alain.

Don't forget to rate helpful posts.

srikanth ath · ‎08-24-2011

this is output for ssh .. i have tried everywr to enable but if i try to type ssh it prompts like unrecognised command

..1..initial part is my switch supports ssh

2. if it supports how to enable it ( i have tried with this command in config mode.. crypto key generate RSA)

switch3#sh ip ssh version ?

% Unrecognized command

switch3#sh ip ssh ?

% Unrecognized command

switch3#sh ip ssh ?

% Unrecognized command

switch3#sh ip ssh ?

% Unrecognized command

switch3#sh ip ssh

any kind of help please

thanks

srikanth

cadet alain · ‎08-24-2011

Post the sh ver | i IOS output as I asked above.

Alain.

Don't forget to rate helpful posts.

srikanth ath · ‎08-24-2011

hi alain

here is my sh ver output..

and i just came to know i should download cryptographic software image from cisco. is this is the problem if so

1. where can i download

2. how to install it in to the switch

3. help me out with clear config steps.

Cisco IOS Software, C3750 Software (C3750-IPBASE-M), Version 12.2(35)SE5, RELEAS

E SOFTWARE (fc1)

Compiled Thu 19-Jul-07 19:15 by nachen

Image text-base: 0x00003000, data-base: 0x01080000

ROM: Bootstrap program is C3750 boot loader

BOOTLDR: C3750 Boot Loader (C3750-HBOOT-M) Version 12.2(25r)SEE4, RELEASE SOFTWA

RE (fc1)

switch3 uptime is 46 minutes

System returned to ROM by power-on

System image file is "flash:c3750-ipbase-mz.122-35.SE5/c3750-ipbase-mz.122-35.SE

5.bin"

cisco WS-C3750G-24TS-1U (PowerPC405) processor (revision H0) with 118784K/12280K

bytes of memory.

Processor board ID FOC1503V6EM

Last reset from power-on

8 Virtual Ethernet interfaces

28 Gigabit Ethernet interfaces

The password-recovery mechanism is enabled.

512K bytes of flash-simulated non-volatile configuration memory.

Base ethernet MAC Address : C0:62:6B:9C:CB:00

Motherboard assembly number : 73-10219-09

Power supply part number : 341-0098-02

Motherboard serial number : FOC150274K6

Power supply serial number : AZS1504011R

Model revision number : H0

Motherboard revision number : A0

Model number : WS-C3750G-24TS-S1U

System serial number : FOC1503V6EM

Top Assembly Part Number : 800-26859-03

Top Assembly Revision Number : C0

Version ID : V05

CLEI Code Number : COMB600BRA

Hardware Board Revision Number : 0x09

Switch Ports Model SW Version SW Image

------ ----- ----- ---------- ----------

* 1 28 WS-C3750G-24TS-1U 12.2(35)SE5 C3750-IPBASE-M

Configuration register is 0xF

thanks and regards

srikanth

cadet alain · ‎08-24-2011

Hi,

this is indeed the problem, you haven't got a k9 image.

You'll have to download a valid IOS image from Cisco to a tftp or ftp server.

Then you'll have to verify you have enough space in flash to upload the image to flash.

If space is ok then you can do a copy ftp:// / path to image flash: or the same with tftp.

If ftp then configure ftp password and username: ip ftp password and ip ftp user in global config.

Then ask system to boot from this image with the bootsystem flash: command.

Once it is working you can delete the old IOS and remove the bootsystem command.

Regards.

Alain.

Don't forget to rate helpful posts.

srikanth ath · ‎08-24-2011

hi alain,

got confused in searching the ios image .. there are number of ios . but which of them should i have to download which supports ssh service to my switch(3750g version :12.2(35) ). if u could please help me with this, i will be really thankful to you.

cadet alain · ‎08-24-2011

Hi,

the ipbasek9-12.2(35)SE1 to SE5 support ssh.

Alain.

Don't forget to rate helpful posts.

Peter Paluch · ‎08-24-2011

Srikanth and Alain,

Every image that contains the string k9 in its name should support SSH. The k9 designates that the image supports crypto features including SSH.

Best regards,

Peter

cadet alain · ‎08-24-2011

Hi Peter,

I just cited these versions so he doesn't downgrade version but keeps the same or upgrade he he can but with a k9 image.

Regards.

Alain.

Don't forget to rate helpful posts.

Peter Paluch · ‎08-24-2011

Hello Alain,

Certainly so. I am not correcting you I just thought that it is fairly simple to know whether an image supports crypto operations simply by looking at its name, so I've added that remark.

Best regards,

Peter

srikanth ath · ‎08-24-2011

hello guys

i have downloaded ADVANCED IP SERVICES WITH WEB BASED DEV MGR

c3750-advipservicesk9-tar.122-35.SE5.tar will this gonna work out to use ssh service and all layer 3 +layer 2 functions

thanks for your time u have helped me a lot

regards

srikanth

Jon Marshall · ‎08-24-2011

Srikanth

You originally had IPBase so you should download the IPBASE image with a k9 in the image name.

If you download Advanced IP Services and you previously had IP BASE you need to pay for the upgrade.

Jon

Peter Paluch · ‎08-24-2011

Srikanth,

Do not forget to mark this thread as answered - Alain has precisely identified the source of your problem and provided you with a correct solution.

Best regards,

Peter

cadet alain · ‎08-24-2011

Hi Peter,

Thanks for all you're doing for the community.

Regards.

Alain.

Don't forget to rate helpful posts.