6200networks.com

by Joe Harris, CCIE# 6200

Today is Wednesday, October 08th, 2008

About the Author

Joe Harris, CCIE No. 6200 (R&S, Security & SP) is a Systems Engineer with Cisco Systems® specializing in Security. In addition to authoring Cisco Network Security Little Black Book, Joe has also been a technical reviewer for several Cisco Press publications and written articles, white papers, and presentations on various security technologies. He also assists various Certification Partners by beta testing their newest CCIE certification workbooks and has been recognized by Cisco as an SE Wall of Fame award winner.

See All Posts by This Author

12.4(15)T is last Cisco IOS T Release for Select Cisco Router Platforms

July 14th, 2008 • Related • Filed Under

If you looked at my last post you will notice that 12.4(20)T has hit the streets for download on CCO; however one thing I failed to mention was that IOS Software Release 12.4(20)T and later Cisco IOS T releases will not support several platforms that were supported in prior Release 12.4T releases. These platforms will be supported by Release 12.4(15)T via regularly scheduled software maintenance rebuilds and bug fix support until the end of software maintenance date for the respective platform is reached. So if you attempt to download 12.4(20)T to your router by accessing CCO and you noticed that 12.4(20)T is not available for your router, well then you most likely are effected by this specific bulletin .

So what platforms aren’t supported exactly? Well here’s your list:

Cisco SOHO 90 Series

Cisco 831, 836, and 837 Series

Cisco 1701, 1711, 1712, 1721, 1751, 1751-V, and 1760 Series

Cisco 2610XM-2611XM, 2620XM-2621XM, 2650XM-2651XM, and 2691 Series

Cisco 3631 and 3660 Series

Cisco 3725 and 3745 Series

Cisco 7400 Series

Cisco AS5850 Universal Gateway

Please read the IOS Software Release 12.4T Q&A for additional details:

Cisco IOS Software Release 12.4T Q&A

There Are 11 Responses So Far. »

Comment by Gjeem Markaj on 14 July 2008:

Joe,

I recently upgraded my ASAs to 8.0(3) and I noticed that ASDM now stars out your IKE pre-shared keys for remote access VPNs (they used to be in cleartext). Is there any way to retrieve them or see them in cleartext again?

Thanks!

Gjeme
Comment by Joe Harris on 14 July 2008:

Gjeme,

You will not be able to view the keys from the within the ASDM application. You can copy the running config to a TFTP server using “write net” and parse through it to get the pre-shared keys or you can access https://IP Address of ASA/admin/config. Those will be the only way you can view the keys.
Comment by David on 14 July 2008:

Gjeme, you can do a ‘more system:running-config’, this will display the passwords in clear text.

David
Comment by Joe Harris on 14 July 2008:

True, but keep in mind there is no way to see them from the ASDM interface which I think is his issue.
Comment by Gjeme Markaj on 15 July 2008:

Thanks for the tips!
Comment by Nikolay Shopik on 15 July 2008:

strangely 12.4(20)T still unavailable for 850 series.
Comment by FCA on 15 July 2008:

Joe, are you sure?
Try starting ASDM then click Tools, then select Command Line Interface, then type
more system:running-config | include key
then click button labelled Send.
Now you can see preshared keys in ASDM.
Comment by Joe Harris on 15 July 2008:

Sure you can view it from there, it’s issuing the ’show’ command from the CLI of the ASA…however try and view it from the Configuration -> Remote Access VPN -> Network (Client) Access -> IPSec Connection profiles page and you will be unable to view it or anywhere else a pre-shared key is listed…I even double checked with the ASDM dev group and they confirmed.
Comment by Joe Harris on 16 July 2008:

Nikolay,

The 850’s are in the same boat as the other routers listed in the product bulletin they were just left off the list by accident:

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps8802/ps6968/ps6441/product_bulletin_c25_466578.html
Comment by Nikolay Shopik on 17 July 2008:

Thanks Joe, still think its kind unfair for 850 series(introduced in same time as 870). Will wait 12.5M because 12.4(20)T have big amount of bug fixes we are need to.
Comment by Joe Harris on 18 July 2008:

Nikolay, 12.5(anything) code will be a while before hitting CCO…Please ask your Cisco SE for further details. IOS Release 12.4(15)T will be a long-lived stability release where regularly scheduled software maintenance rebuilds are planned. So the current recommended release for you would be 12.4T up to 12.4(15)T for new features and hardware support. Again ask your SE for further details.