Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

no crypto on 2950sx?

I have about a dozen 2950SX switches in the 24 port and 48 port variety that are running the non-crypto standard image. I have downloaded the crypto version for the 2950, but I just read a note that the sx versions of the switch cannot run the crypto as they do not support the EI feature set. Just trying to verify if this is true or not.

goal is to remove telnet and enable ssh.


Re: no crypto on 2950sx?

That is correct. See the link below which states:

"The Catalyst 2950SX-48-SI, 2950T-48-SI, 2950SX-24, 2950-24, and 2950-12 switches cannot be upgraded to the Enhanced Image (EI) software."

Hope this helps. If so, please rate the post.


Re: no crypto on 2950sx?

You are correct that the SX series switches cannot be upgraded to the E1 feature set but after upgrading to crypto image you can configure SSH

I have SSH running successfully on a C2950SX-24 switch using the following code( c2950-i6k2l2q4-mz.121-22.EA9.bin")



New Member

Re: no crypto on 2950sx?

Ok, the ssh is the only thing I had hoped to gain by running the new image. I understand about he SX's not being able to run the enhanced, but the way I read the documentation the ssh was only enabled after the EI feature set was running.

I am going to put on the c2950-i6k2l2q4-mz.121-22.EA11.bin release and then enable the ssh. Good to know that it will work.


New Member

Re: no crypto on 2950sx?

Just found the following line in the release notes that I missed previously:

The cryptographic SI and EI support the Secure Shell Version 2 (SSHv2) protocol.

CreatePlease login to create content