® announces Cisco IOS
® Software updates for the Cisco
® 2955, 2950, 2950-LRE, and 2940 series and Catalyst 2955 intelligent Ethernet switches. This product bulletin contains content and delivery information for Cisco IOS Software Release 12.1(22)EA2. For more information about the Cisco IOS Software release process, see Product Bulletin 537.
With this software release, Cisco Catalyst 2950 Series switches running Standard Image (SI) and Cisco Catalyst 2940 Series switches now support Secure Shell (SSH) Protocol. SSH provides a secure, remote connection to devices with more security than Telnet, using strong encryption when a device is authenticated. This software release supports SSH versions 1 and 2 (SSHv1 and SSHv2).
SSH is a cryptographic security feature that is subject to export restrictions. You must obtain authorization to use this feature and to download the cryptographic software files from Cisco. For more information, refer to the release notes for this release.
With Cisco IOS Software Release 12.1(22)EA2, Cisco Catalyst 2950 Series switches running Standard Image (SI) support data insertion with Dynamic Host Configuration Protocol (DHCP) option 82 (also known as DHCP relay agent). In residential, metropolitan Ethernet-access environments, DHCP can centrally manage IP address assignments for numerous subscribers. When the DHCP option 82 feature is enabled, a subscriber device is identified by the switch port through which it connects to the network (in addition to its MAC address). Multiple hosts on the subscriber LAN can be connected to the same port on the access switch and be uniquely identified. Because the DHCP clients and their associated DHCP server do not reside on the same IP network or subnet, a DHCP relay agent (the switch) is configured with a helper address to enable broadcast forwarding and to transfer DHCP messages between the clients and the server.
The default behavior for 802.1x with guest VLAN support on Cisco Catalyst 2950 and 2940 series switches is changed with this release. Client devices attempting to authenticate that support the 802.1x supplicant are not allowed in the guest VLAN if the 802.1x authentication fails. This implementation is consistent with Cisco Catalyst 4000 and 6000 series switches.
NEW FEATURES IN CISCO IOS SOFTWARE RELEASE 12.1(22)EA2
The new features shown in Table 1 are delivered in Cisco IOS Software Release 12.1(22)EA2.
Table 1. Cisco IOS Software Release 12.1(22)EA2 New Features
Cisco Catalyst 2955 Switch
Cisco Catalyst 2950 Series EI
Cisco Catalyst 2950 Series SI
Cisco Catalyst 2950 LRE Series
Cisco Catalyst 2940 Series
DHCP option 82
IEEE 802.1x with guest VLAN enhancement
SI-Standard Multilayer Image
EI-Enhanced Multilayer Image
X-Feature is new for this platform
E-Feature exists for this platform
Feature enhancements made to Cisco Network Management Software with this release are highlighted in Table 2.
Table 2. New Features in Cisco Network Management Software
Cisco Device Manager
Cisco Device Manager is a graphical device management tool that provides real-time views of the configuration and performance conditions for a single switch. It provides features such as Express Setup and Smartports to simplify switch management tasks. It also uses graphical, color-coded displays such as a Front Panel view of the switch, graphs, and animated indicators to simplify switch monitoring tasks.
Cisco Device Manager can be launched from anywhere in your network through a Web browser such as Microsoft Internet Explorer or Netscape Navigator. The Cisco Catlayst Catalyst 2955, 2950-LRE, 2950, and 2940 series and Catalyst 2955 switches extend support for Cisco Device Manager with this software release.
The Layer 2+ capable fixed-configuration Cisco Catalyst switches supported with this software release are listed in Table 3.
Table 3. Layer 2+ Products Supported with this Release
Cisco Catalyst 2955 Enhanced Image EI Models
Cisco Catalyst 2950 Series Enhanced Image EI Models
Cisco Catalyst 2950 Series Standard Image SI Models
Cisco Catalyst 2950 Series Switches:
Cisco Catalyst 2950 LRE Series Switches:
Cisco Catalyst 2940 Series Switches:
Due to export restrictions on strong cryptography, a separate image is required for cryptographic features (Secure Shell Protocol, Simple Network Management Protocol Version 3, and Kerberos Protocol). These software images can be downloaded from the corresponding Triple Data Encryption Standard area of the links provided in this section.
Cisco IOS Software Release 12.1(22)EA2 follows the standard Cisco support policy as indicated at:
Software Image Migration Guide
Figure 1 displays Cisco IOS Software Release 12.1(22)EA2 relative to the 12.1 and 12.1E releases and identifies the recommended migration path. For more information about the Cisco IOS Software release process, see Product Bulletin 537.