IOS UPGRADING

[MrNick0483]

We currently have 28 Cisco 3560-48PS switches running IOS 12.(25)SEE3-IP-BASE. We recently had to open a TAC case on one of them, and through discussion with the Cisco tech, he recommended upgrading all of these switches IOS to version 12.2(55)SE5-IP-BASE-CRYPTO as the version that is running on them now is very out dated. Would this be something worth while for us to do even though we are not having any issues with them?

 

[baddos]

I would refer to TAC in this case, but I generally keep mine relatively up to date. If you aren't running a crypto build, you should for sure upgrade and start managing your switch with SSH/SSL.

 

[MrNick0483]

Do you see any problems with upgrading all of these switches through the Cisco Network Assistant tool?

 

[VinceWhirlwind]

I have done network refreshes where I have replaced Cisco switches that had been up-and-running for over 4 years without interruption.

With Cisco, I've pretty much always been happy to leave the updating unless I have to address a specific bug or specific new feature requirement.

Techs who tell you to upgrade your firmware without giving you a specific reason to do so are probably pretty junior techs whose advice may not be worth a whole lot.

 

[vipergg]

I can tell you the tac wont even look at an issue unless its up to date on the code.

 

[MrNick0483]

I keep the same mind set as you Vince, some of these switches have been up and running for well over two years with no issues. So i am having a hard time talking myself into these upgrades being needed. The only thing that is pushing me towards doing it would be the security of getting ride of telnet and going to SSH.

 

[VinceWhirlwind]

@vipergg: I'm finding the various vendors' "support" is getting less and less useful as time goes by.
You get the level1 guy who knows nothing, telling you to do random firmware upgrades. Getting past him is hard enough if you *do* do the random unnecessary upgrade, so it all boils down to a choice between you fixing the problem yourself, and you wasting a lot of time dealing with ignorant techs in the hope it will eventually get escalated to somebody who actually understands how to troubleshoot.

Back in the day, a recommendation to do a firmware upgrade always came with a reference to the release notes for that patch which referred to a specific fault that the patch fixed.

 

[vipergg]

Wont argue with you there , Cisco in particular seem to have less knowledgable guys these days and having to deal with the ridiculous follow the sun model and trying to understand all the people from foreign countries has gotten ridiculous.

 

[VinceWhirlwind]

I feel slightly bad doing it, but when they send you the feedback questionnaire these days I almost always put a few low marks on it together with a comment to the effect that, "operative communication skills were sub-par, needs english training".

The way I see it, they want to off-shore our jobs to cheap O/S labor, they're not going to get my help doing it.