Encryption Levels 1

[bubarooni]

I have 4 1750 routers, each running 12.2(11)T IOS. Is there a command I can run on the router to see what encryption level (DES, 3DES, AES) is available on the router?

Thanks

 

[jneiberger]

I may be misremembering the way Cisco IOS is named but I think you can do a show version (or show flash, or "dir") and take a look at the image name. As I recall, if you see k8 then it can only do DES, but it can do 3DES if you see k9.

 

[bubarooni]

Excellent! I did do a 'show ver' and there is a flash image name in there. I'll check it out when I get to the office.

Thanks

 

[bubarooni]

I have this image file running on the routers:

System image file is "flash:c1700-k8o3sy7-mz[1].122-11.T.bin"

I see the k8 in there. Does this mean no 3DES?

 

[jneiberger]

Yep. That image is IP/ADSL/FW/IDS PLUS IPSEC 56. Triple DES is not available on that image.

By the way, the image you listed is no longer available on CCO and it appears to be deferred. If you have the option, you might consider upgrading to 12.2(15)T16.

 

[bubarooni]

I hate to be asking you to do all my legwork but I'm having trouble navigating the Cisco site so:

I have the following file:

c1700-k9o3sy7-mz.123-9a.bin

how does it differ from 12.2(15)T16? do they have the same feature set? When I downloaded that file I remember thinking that would fit in my routers but some others wouldn't.

 

[jneiberger]

Those are the same feature set except the new one gives you 3DES. Other than that, they're nearly identical regarding features. The latest version of that image is 12(3)9d.

 

[GeneralDzur]

I apologize for piggybacking on this thread, but I can't seem to figure out what my image does either. I'm registered with Cisco.com, but I don't know where to go from there.

c2600-is-mz.120-7.T

What is this image good for? It's our current one. The only other image I have is:

c2600-ik9o3s3-mz[1].123-13

but I don't know what it does either. I assume the 'ik9' part means it supports 3DES?

- stephan

 

[jneiberger]

You need to use the Cisco Software Advisor found here:

http://www.cisco.com/cgi-bin/Support/CompNav/Index.pl