Enabling SSH on 2950

MartinCoxx

Hi Guys

My first Cisco Q here, as I've just started out with it!

I'm following CBT Nuggets and I've passed a point of configuring the virtual terminals for remote access via telnet. The instructor then goes on to explain enabling SSH on the switch for secure access...

However, on my 2950 switch it doesn't appear to have the crypto option. I assume this is something to do with the IOS version (Haven't really covered that yet)?

Can anybody shed any light on this problem, please?

Thanks

Martin

MartinCoxx

I've just done a little more digging and it seems as though I have to download the Cryptographic Enhanced Software Image. But it also says that this has to be authorised in some way? Is this a licensed feature?

tiersten

If you have the crypto version of IOS then it should be enabled. You don't need to do anything else with it like type in an activation key.

What version of IOS do you have? Filename?

MartinCoxx

tiersten wrote: »

If you have the crypto version of IOS then it should be enabled. You don't need to do anything else with it like type in an activation key.

What version of IOS do you have? Filename?

Hi

The filename is c2950-i6q4l2-mz.121-22.EA6.bin.

Thanks

Martin

tiersten

MartinCoxx wrote: »

The filename is c2950-i6q4l2-mz.121-22.EA6.bin.

Yeah. That particular IOS file doesn't have crypto support and therefore has no SSH support.

You should be able to download switch IOS files from Cisco.com using just a regular guest account. You don't need a SMARTnet contract associated with it.

MartinCoxx

Hi

Thanks for getting back to me.

Is the reason it doesn't have SSH just because it's an older version of the IOS?

Is this the right link for downloading the latest IOS? Am I able to do this for all of my devices too?

Thanks

Martin

tiersten

MartinCoxx wrote: »

Is the reason it doesn't have SSH just because it's an older version of the IOS?

It doesn't have SSH because you don't have the crypto feature in that particular IOS. It is split out because of export restrictions so there is a crypto and non crypto version.

MartinCoxx wrote: »

Is this the right link for downloading the latest IOS?

Go to Support and then Downloads to get to the download area.

MartinCoxx wrote: »

Am I able to do this for all of my devices too?

For switches you can download IOS files without a support contract. For everything else you require a support contract associated with your account. Be aware that Cisco do say that they monitor downloads of IOS switch files that actually do require a paid upgrade like EMI/IPServices for a 3550/3560.

MartinCoxx

Hi

A really big thanks for your help and advice. Just one more question!

I'm trying to download the latest IOS with the crypto engine, but I'm a little unsure on which one to download. Here are the options:

[SIZE=2]C2950 EI AND SI IOS CRYPTO IMAGE
c2950-i6k2l2q4-mz.121-22.EA13.bin
Release Date: 03/Mar/2009
Size: 3634.72 KB  (3721946 bytes)
Minimum Memory: DRAM:16 MB  Flash:8 MB
 
C2950 EI AND SI IOS CRYPTO AND WEB BASED DEVICE MANAGER
c2950-i6k2l2q4-tar.121-22.EA13.tar
Release Date: 03/Mar/2009
Size: 5610.00 KB  (5744640 bytes)
Minimum Memory: DRAM:16 MB  Flash:8 MB
 
C2950 EI AND SI IOS IMAGE
c2950-i6q4l2-mz.121-22.EA13.bin
Release Date: 03/Mar/2009
Size: 3058.89 KB  (3132298 bytes)
Minimum Memory: DRAM:16 MB  Flash:8 MB
 
C2950 EI AND SI IOS IMAGE AND WEB BASED DEVICE MANAGER
c2950-i6q4l2-tar.121-22.EA13.tar
Release Date: 03/Mar/2009
Size: 5030.00 KB  (5150720 bytes)
Minimum Memory: DRAM:16 MB  Flash:8 MB [/SIZE]           

Am I right in assuming that it's the top one of the four? Sorry for my noobism!

Thanks

Martn

tiersten

The second one (c2950-i6k2l2q4-tar.121-22.EA13.tar) since you get the web GUI as well. Read the installation guide.

Stotic

Don't forget crypto key generate