SSH Image on ERS55xx / 45XX Switches

[Bez]

Morning all,

Is there an easy way of finding out which image I have loaded on my switches ?

I can do a sho sys-info to find the software level that is deployed, but this doesn't tell me if I have the "s" image required to run SSH

Thanks in advance

Bez

[jeremyowens]

I typically do one of the following, depending on whether I'm setting up ssh or verifying the settings:

switch# show ssh global
-or-
switch(config)# ssh

If either of those give you an error, you don't have the secure image installed.

-Jeremy

[Bez]

Thanks Jerry....

Any other opinions on this one ?

It would be nice to see which image was going to be loaded by being able to interrogate the flash

[Telair]

If you look at the software code installed there is a small difference between SSH and non-SSH code in the version number.

eg.  My 5650TD-PWR switch reports it is using software version v6.3.3.041.  If you have the documentation for v6.3.3 code it will say:

5xxx_633040.img Agent code image 19,224,680 bytes
5xxx_633041s.img Agent code image (SSH) 20,018,172 bytes

Since my switch is using .041 instead of .040, it is using the SSH code.

[Bez]

If you look at the software code installed there is a small difference between SSH and non-SSH code in the version number.

eg.  My 5650TD-PWR switch reports it is using software version v6.3.3.041.  If you have the documentation for v6.3.3 code it will say:

5xxx_633040.img Agent code image 19,224,680 bytes
5xxx_633041s.img Agent code image (SSH) 20,018,172 bytes

Since my switch is using .041 instead of .040, it is using the SSH code.

Yep, I get that, but where do I look on the box to see which image is going to be loaded ?

Thx

[Telair]

It's right on the front page when you connect to the switch via EDM.  The first screen that comes up is the Switch Summary page.  Look for the info below.


Switch / Base Unit Information

sysDescr: Ethernet Routing Switch 5650TD-PWR    HW:04       FW:6.0.0.18  SW:v6.3.3.041 BN:41 (c) Avaya Networks

[Bez]

It's right on the front page when you connect to the switch via EDM.  The first screen that comes up is the Switch Summary page.  Look for the info below.


Switch / Base Unit Information

sysDescr: Ethernet Routing Switch 5650TD-PWR    HW:04       FW:6.0.0.18  SW:v6.3.3.041 BN:41 (c) Avaya Networks

Thanks Telair,

That doesn't work on the level of software that we're running on our 45xx switches (5.1.2.005)

I just see "SW:5.1.2.005" and the 45xx image that we use is the "s" image....

I'll get one of the guys to do an audit by using the "sho ssh global" command, its going to take a while though with 350+ switches / stacks

[WillyHe2]

To know if it regards a secure or non secure version is simple, when the last number is a pair number it is the NON secure version, when its an unpair number it is the SECURE version.
To see which version is running there are multiple ways, "show boot", "show flash", "show sys-info verbose", ... Be aware there are two version numbers shown, one for the "diagnostic" image and one for the image.

[telecom116]

I'll get one of the guys to do an audit by using the "sho ssh global" command, its going to take a while though with 350+ switches / stacks

Use SNMP to gather the running software version info from each of your switches.  I can pull reports out of both of my monitoring (Solarwinds NPM) and configuration management system (HP Network Automation) gather the version info.  No need to log into all of your switches individually.