no crypto on 2950sx?

[dsturgeon]

I have about a dozen 2950SX switches in the 24 port and 48 port variety that are running the non-crypto standard image. I have downloaded the crypto version for the 2950, but I just read a note that the sx versions of the switch cannot run the crypto as they do not support the EI feature set. Just trying to verify if this is true or not.

goal is to remove telnet and enable ssh.

[Brandon Buffin]

That is correct. See the link below which states:

"The Catalyst 2950SX-48-SI, 2950T-48-SI, 2950SX-24, 2950-24, and 2950-12 switches cannot be upgraded to the Enhanced Image (EI) software."

http://www.cisco.com/en/US/products/hw/switches/ps628/prod_bulletin09186a00801cfeec.html

Hope this helps. If so, please rate the post.

Brandon

[royalblues]

You are correct that the SX series switches cannot be upgraded to the E1 feature set but after upgrading to crypto image you can configure SSH

I have SSH running successfully on a C2950SX-24 switch using the following code( c2950-i6k2l2q4-mz.121-22.EA9.bin")

HTH

Narayan

[dsturgeon]

Ok, the ssh is the only thing I had hoped to gain by running the new image. I understand about he SX's not being able to run the enhanced, but the way I read the documentation the ssh was only enabled after the EI feature set was running.

I am going to put on the c2950-i6k2l2q4-mz.121-22.EA11.bin release and then enable the ssh. Good to know that it will work.

Thanks.

[dsturgeon]

Just found the following line in the release notes that I missed previously:

The cryptographic SI and EI support the Secure Shell Version 2 (SSHv2) protocol.

http://www.cisco.com/en/US/docs/switches/lan/catalyst2950/software/release/12.1_22_ea11/release/notes/OL14991.html