Run show version and show flash: – ensure you have at least 15 MB free . The SE11 image weighs in at approximately 12,800,000 bytes (13.1 MB). Download Legally: You can only obtain c3560ipservicesk9mz1502se11bin from Cisco.com under a valid SmartNet contract (or free download for EOL software under restricted access). Do not trust random torrents—malicious IOS images are a known supply chain attack vector. Part 4: Step-by-Step Upgrade Procedure We will use the TFTP method , the most reliable for legacy switches. Step 1: Stage the File Place the .bin file in your TFTP server’s root directory (e.g., C:\TFTP-Root\ or /tftpboot/ on Linux). Step 2: Initiate the Download Over TFTP From privileged EXEC mode ( enable ), use the archive download-sw command. This command automatically unpacks (if it were a .tar ) and sets the boot variable.
Switch# verify /md5 flash:c3560ipservicesk9mz1502se11bin Always verify the MD5 checksum (available on Cisco’s download page) before reloading. Your future self will thank you.
Switch# delete flash:/old_image.bin Switch# delete flash:/multiple_bin_files/ Switch# squeeze flash: (Defragments flash memory and truly reclaims space) Symptom: Switch restarts repeatedly or ends up at switch: prompt. Fix: You are now in ROMmon. Load a new image via XMODEM (sloooow) or TFTP from ROMmon:
Switch# copy tftp://192.168.1.100/c3560ipservicesk9mz1502se11.bin flash: Switch# dir flash: (verify the file) Switch# boot system flash:c3560ipservicesk9mz1502se11.bin Switch# write memory Switch# reload After the switch reloads, run:
Loading c3560ipservicesk9mz1502se11.bin from 192.168.1.100 (via Vlan1): !!!!!!!!!!!!!!!!!!!!!!! [OK - 13107200 bytes] extracting info (107 bytes) Image copied, booting... If archive download-sw fails, use the legacy method:
rommon 1> IP_ADDRESS=192.168.1.2 rommon 2> IP_SUBNET_MASK=255.255.255.0 rommon 3> DEFAULT_GATEWAY=192.168.1.1 rommon 4> TFTP_SERVER=192.168.1.100 rommon 5> TFTP_FILE=c3560ipservicesk9mz1502se11.bin rommon 6> tftpdnld This takes 15-20 minutes. Be patient. Symptom: "%SSH-3-NOSSH: No SSH server running" Fix: SE11 regenerates RSA keys on first boot, but sometimes the crypto key is missing.
Switch# show version | include IOS Expected output: Cisco IOS Software, C3560 Software (C3560-IPSERVICESK9-M), Version 15.0(2)SE11