What is the difference between an image that is "Universal" vs. "Universal without DTLS"

[KMNRuser]

When i download software for my 9300 switch for version 16.9.5, i have to decide between two images.  the choices are:

1.  CAT9300/9400/9500 Universal, or 

2.  CAT9300/9400/9500 UNIVERSAL W/O DTLS

what is DTLS?  and how would i know if i need it or not?

Thanks,

Kevin

[Reza Sharifi · Accepted solution]

Usually DTLS image is not needed unless you want to configure TLS. See link for more info

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-9/configuration_guide/sec/b_169_sec_9300_cg/b_169_sec_9300_cg_chapter_010110.html

HTH

[Scott Hodgdon · Accepted solution]

KMeltonFLSA,

Images without DTLS cannot use any encryption services (e.g. MACsec). Originally these images were put in placed to sell to countries where US encryption standards are not allowed due to export restrictions or due to the receiving country's laws. if you are not selling to, or deploying in, one of these restricted countries, it is best to order the image with DTLS.

Cheers,
Scott Hodgdon

Senior Technical Marketing Engineer

Enterprise Networking Group