Enabling SSH on 2950

MartinCoxxMartinCoxx Member Posts: 12 ■□□□□□□□□□
Hi Guys

My first Cisco Q here, as I've just started out with it!

I'm following CBT Nuggets and I've passed a point of configuring the virtual terminals for remote access via telnet. The instructor then goes on to explain enabling SSH on the switch for secure access...

However, on my 2950 switch it doesn't appear to have the crypto option. I assume this is something to do with the IOS version (Haven't really covered that yet)?

Can anybody shed any light on this problem, please?

Thanks

Martin

Comments

  • MartinCoxxMartinCoxx Member Posts: 12 ■□□□□□□□□□
    I've just done a little more digging and it seems as though I have to download the Cryptographic Enhanced Software Image. But it also says that this has to be authorised in some way? Is this a licensed feature?
  • tierstentiersten Member Posts: 4,505
    If you have the crypto version of IOS then it should be enabled. You don't need to do anything else with it like type in an activation key.

    What version of IOS do you have? Filename?
  • MartinCoxxMartinCoxx Member Posts: 12 ■□□□□□□□□□
    tiersten wrote: »
    If you have the crypto version of IOS then it should be enabled. You don't need to do anything else with it like type in an activation key.

    What version of IOS do you have? Filename?

    Hi

    The filename is c2950-i6q4l2-mz.121-22.EA6.bin.

    Thanks

    Martin
  • tierstentiersten Member Posts: 4,505
    MartinCoxx wrote: »
    The filename is c2950-i6q4l2-mz.121-22.EA6.bin.
    Yeah. That particular IOS file doesn't have crypto support and therefore has no SSH support.

    You should be able to download switch IOS files from Cisco.com using just a regular guest account. You don't need a SMARTnet contract associated with it.
  • MartinCoxxMartinCoxx Member Posts: 12 ■□□□□□□□□□
    Hi

    Thanks for getting back to me.

    Is the reason it doesn't have SSH just because it's an older version of the IOS?

    Is this the right link for downloading the latest IOS? Am I able to do this for all of my devices too?

    Thanks

    Martin
  • tierstentiersten Member Posts: 4,505
    MartinCoxx wrote: »
    Is the reason it doesn't have SSH just because it's an older version of the IOS?
    It doesn't have SSH because you don't have the crypto feature in that particular IOS. It is split out because of export restrictions so there is a crypto and non crypto version.
    MartinCoxx wrote: »
    Is this the right link for downloading the latest IOS?
    Go to Support and then Downloads to get to the download area.
    MartinCoxx wrote: »
    Am I able to do this for all of my devices too?
    For switches you can download IOS files without a support contract. For everything else you require a support contract associated with your account. Be aware that Cisco do say that they monitor downloads of IOS switch files that actually do require a paid upgrade like EMI/IPServices for a 3550/3560.
  • MartinCoxxMartinCoxx Member Posts: 12 ■□□□□□□□□□
    Hi

    A really big thanks for your help and advice. Just one more question!

    I'm trying to download the latest IOS with the crypto engine, but I'm a little unsure on which one to download. Here are the options:
    [SIZE=2]C2950 EI AND SI IOS CRYPTO IMAGE
    c2950-i6k2l2q4-mz.121-22.EA13.bin
    Release Date: 03/Mar/2009
    Size: 3634.72 KB  (3721946 bytes)
    Minimum Memory: DRAM:16 MB  Flash:8 MB
     
    C2950 EI AND SI IOS CRYPTO AND WEB BASED DEVICE MANAGER
    c2950-i6k2l2q4-tar.121-22.EA13.tar
    Release Date: 03/Mar/2009
    Size: 5610.00 KB  (5744640 bytes)
    Minimum Memory: DRAM:16 MB  Flash:8 MB
     
    C2950 EI AND SI IOS IMAGE
    c2950-i6q4l2-mz.121-22.EA13.bin
    Release Date: 03/Mar/2009
    Size: 3058.89 KB  (3132298 bytes)
    Minimum Memory: DRAM:16 MB  Flash:8 MB
     
    C2950 EI AND SI IOS IMAGE AND WEB BASED DEVICE MANAGER
    c2950-i6q4l2-tar.121-22.EA13.tar
    Release Date: 03/Mar/2009
    Size: 5030.00 KB  (5150720 bytes)
    Minimum Memory: DRAM:16 MB  Flash:8 MB [/SIZE]           
    
    Am I right in assuming that it's the top one of the four? Sorry for my noobism!

    Thanks

    Martn
  • tierstentiersten Member Posts: 4,505
    The second one (c2950-i6k2l2q4-tar.121-22.EA13.tar) since you get the web GUI as well. Read the installation guide.
  • StoticStotic Member Posts: 248
    Don't forget crypto key generate
Sign In or Register to comment.