Link to home
Start Free TrialLog in
Avatar of Dan
DanFlag for United States of America

asked on

crypto command doesn't work

I'm not sure why, but can someone tell me what I'm doing wrong, I'm trying to setup a cert so I can SSH into the switch, but I keep on getting this invalid input.


Enter configuration commands, one per line.  End with CNTL/Z.
dan_3750G_.40(config)#ip domain-name dan_3750G_.40.com
dan_3750G_.40(config)#crypto key generate rsa
                       ^
% Invalid input detected at '^' marker.

dan_3750G_.40(config)#crypto key generate rsa
                       ^
% Invalid input detected at '^' marker.

dan_3750G_.40(config)#crypto ?
% Unrecognized command
dan_3750G_.40(config)#crypto
                       ^
% Invalid input detected at '^' marker.

dan_3750G_.40(config)#
dan_3750G_.40(config)#


dan_3750G_.40(config)#end
dan_3750G_.40#show ver
Aug 10 20:05:22.226 pst: %SYS-5-CONFIG_I: Configured from console by console
dan_3750G_.40#show ver
Cisco IOS Software, C3750 Software (C3750-IPSERVICES-M), Version 12.2(50)SE5, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Tue 28-Sep-10 12:56 by prod_rel_team
Image text-base: 0x01000000, data-base: 0x02C00000

ROM: Bootstrap program is C3750 boot loader
BOOTLDR: C3750 Boot Loader (C3750-HBOOT-M) Version 12.2(44)SE5, RELEASE SOFTWARE (fc1)

dan_3750G_.40 uptime is 20 minutes
System returned to ROM by power-on
System restarted at 19:44:45 pst Thu Aug 10 2017
System image file is "flash:/c3750-ipservices-mz.122-50.SE5/c3750-ipservices-mz.122-50.SE5.bin"

cisco WS-C3750G-24PS (PowerPC405) processor (revision L0) with 131072K bytes of memory.
Processor board ID FOC1532W4T4
Last reset from power-on
1 Virtual Ethernet interface
28 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.

512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address       : 00:08:30:42:6D:80
Motherboard assembly number     : 73-10217-10
Power supply part number        : 341-0108-04
Motherboard serial number       : FOC15315Z6N
Power supply serial number      : AZS153008YY
Model revision number           : L0
Motherboard revision number     : A0
Model number                    : WS-C3750G-24PS-S
System serial number            : FOC1532W4T4
Top Assembly Part Number        : 800-26855-04
Top Assembly Revision Number    : D0
Version ID                      : V08
CLEI Code Number                : COMB400BRA
Hardware Board Revision Number  : 0x09


Switch Ports Model              SW Version            SW Image
------ ----- -----              ----------            ----------
*    2 28    WS-C3750G-24PS     12.2(50)SE5           C3750-IPSERVICES-M


Configuration register is 0xF
ASKER CERTIFIED SOLUTION
Avatar of Predrag Jovic
Predrag Jovic
Flag of Poland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Dan

ASKER

So how do I obtain an image with the K9?  I bought the switches used and it wasn't from Cisco.
The only legal way is to download it from Cisco's Download Software.
Avatar of Dan

ASKER

I just thought about it, I haven't tried yet, but if I have a Cisco ID, will that work, I'll try that when I get to my computer.  I just remembered I got a Cisco I'd when I got my CCNA.

Or is the IOS have to be purchased?

By the way, besides the ram on the switches, can I install v 15.x on all my switches with crypto?   I have all Old switches, mostly 2960's, 3750g, maybe one or two others.
You need to have a contract support, it will not work with your Cisco account (for exam and similar purposes).
You will need to check which version is supported on your WS-C3750G-24PS does not suppot IOS v15

Not sure if, and what would be procedure to purchase IOS separately, but it could be pricey.
This question has already been answered! you need another IOS code base, I had the same problem here. If you have another switch you can use the IOS from that. But as Predrag has pointed out the only LEGAL way, is to get the code from Cisco.

If I were in this situation I'd work out that the code I needed was something like c3750-ipservicesk9-mz.122-55.SE9.bin Then I would know what I needed to DOWNLOAD LEGALLY FROM CISCO OR A CISCO RESELLER. I would not Google the filename and download it from another source.

{{{Please do not accept this comment as the answer }}}

P