I have 19 devices here, most of which are 3560g-series switches...

.. just got hit with a "ZOMG< UPGRADE IT ALL, NOW!!" requirement.

I have to upgrade to the latest, non-vulnerable and stable, IOS code.

I haven't a clue where to look to download this stuff. I have a TAC account, still getting familar with the lay of the land on Cisco's support site.

A clue-by-four, please??

Ah yes, the world of many hats.

Support/Downloads/enter your model number

3560 page: http://www.cisco.com/cisco/software/navigator.html?mdfid=278542537

Think I have this one figured out, folks- but feel free to post any "gotchas"..

Thanks mlan- your pic is about what I looked like last weekend

One thing that I need to look into, apparently, is how much FLASH and DRAM my devices have... grr, this could get complicated!

EDIT: "show version" FTW!

.. and that brings another question... my device is showing:
"cisco WS-C3560G-24TS (PowerPC405) processor (revision C0) with 122880K/8184K bytes of memory."

Which converts to about 120MB/8MB. I presume the display syntax is "DRAM/Flash"?

If this is true, from what I am seeing I shouldn't even be able to support the IOS I am presently running ((C3560-IPSERVICESK9-M), Version 12.2(50)SE, RELEASE SOFTWARE (fc1)), as the "smallest" version along that 1.2(50) cycle seems to require 128/16.

Learning in a production environment.. yipe!

This line references the total DRAM in the system. (Before the forward slash is available for general system usage, the latter is for I\O, IIRC).

To see the flash size you can use "dir flash:" or "sh flash:"

My Cisco login,

My Devices...

Input atleast 1 of the same model if you have multiple models and some the same, i.e. 2x 1841 routers, 15x 2960's, blah blah

Go to the downloads tab and look for the latest IOS. For switches I think it is around 15.x etc... and for routers I think the same.. Well that still depends on the hardware. Good luck.

_________________
Awesomesauce!!!!

you need to check these devices, there are memory size issues and the versions are now model specific for the 3560s and 3750s
I wouldn't go any higher then 12.2(55)SE5, higher versions have been buggy.

go to the downloads page
http://www.cisco.com/cisco/software/navigator.html

login with your CCO account.

make sure your CCO account is ties to your smartnet contract number

download the ios for your model switch and upgrade,

if you don't have smartnet, you may be able to get a free download
by contacting Cisco and see if there are any upgrades available
(usually when there is a serious vulnerability disclosed)

if none is available you need to gather all your device serial numbers,
and contact a Cisco reseller and get a quote for Cisco support on the devices
to upgrade them, there are many different types of support options
24x7, 8x5, same business day, next business day, etc. you'll need to
decide on the criticality of your devices and the needed support,
then drop the quote on your bosses desk, letting him know that
it will cost X amount of dollars to upgrade the IOS on the switches.

_________________
"If you're good at anticipating the human mind. It leaves nothing to chance."
-Jigsaw

Not really possible. The bug and vulnerabilities are not really known on the "latest" code because it is so new.

and yes, all the code has "issues" vulnerabilities, things that are just plain broken. there is no non-vulnerable and stable, IOS code as it is a work in progress.

_________________
"If you're good at anticipating the human mind. It leaves nothing to chance."
-Jigsaw

Thank you, Sir- and thank you, folks, for your patience as I learn!

Luckily I don't have to jump "trains"... ie, if I'm on 12.1, I only have to update to the most recent 12.1 series....

dont forget to open an account at the local pizza place. i think you will be doing a few long nights and might require some food

Yes, I understand that... and brought that very point up to the boss earlier.

Fixed it for you

Good advice.

Also, look into the use of command as this can save you quite a few headaches as opposed to copying the bin file into flash. It's also worth noting that there are different images available that contain things that might not be necessary in your environment, i.e. the web GUI.

Dan-

Rgoer that. The web-gui IST VERBOTEN in this environment, among other things.. and crypto is *required*.

Did I mention, I am pretty much learning as I go? My boss is famous for saying "this is a teaching hospital-- just don't kill the patient"

.. killing the patient, accidentally, PETRIFIES me. I've spent a few sleepless nights, I'll be honest.

I am having trouble getting the "dir flash" and "show flash" commands to work on a 4500 running 12.2. Off I go to research yet more....

and again, gents- *thank you*

On older chassis switches, try a "dir bootflash:". You can also use "dir ?" to see your options.

_________________
"If you're good at anticipating the human mind. It leaves nothing to chance."
-Jigsaw