Networking Chapters

1.  How to fix vulnerabilities on Cisco Small Business Switches for a small install:

The main vulnerability in Cisco switches for small installations currently involves critical remote code execution (RCE) and denial of service (DoS) vulnerabilities primarily in Cisco Small Business Series switches. These are caused by improper validation of requests in their web interfaces and the misuse of the Cisco Smart Install feature, which can allow an attacker to gain control, modify configurations, or crash the switch.

How to fix vulnerabilities on Cisco Small Business Switches for a small install:

1. Update Firmware Immediately:

   • Cisco released firmware updates for Small Business Series switches, including the 250, 350, 350X, and 550X series.

   • The fixed versions are:

     • 2.5.9.16 or later for the 250/350/350X/550X series.

     • 3.3.0.16 or later for Business 250 and 350 Series Smart Switches.

   • Devices that have reached end-of-life and are not supported (like Small Business 200, 300, 500 series) will not receive updates, so consider replacing those.

How to fix vulnerabilities on Cisco Small Business Switches for a small install:

=========================================================================

2.  SOP: CISCO 3850-48P Stack Upgrade

 Cisco 3850-48P Stack Upgrade to IOS XE 16.12.13

1. Pre-Upgrade Checklist

Before proceeding with the upgrade, ensure the following prerequisites are completed:

·       ✅ Check Install Mode

Ensure the switch stack is running in INSTALL mode:

show version | include Mode

SOP: CISCO 3850-48P Stack Upgrade

=========================================================================

Process for cisco switch 9200 & 9300 upgrade to version 17.15.03

To upgrade Cisco Catalyst 9200 and 9300 switches to IOS XE version 17.15.03, follow these general steps for each model. Both switches use nearly identical upgrade steps in install mode, which is the recommended method for modern Cisco Catalyst switches.

Preparation

• Download the correct 17.15.03 .bin image from Cisco's support portal.

• Ensure 1 GB or more free space in flash memory.

• Console access to the switch is necessary.

• Confirm the device is in Install Mode by running:
  show version

• Save the current configuration:
  write memory

• Process for cisco switch 9200 & 9300 upgrade to version 17.15.03

• ==================================================================================