Cisco – How to upgrade the IOS on Cisco 2610 with 12.3

In order of preference/priority, our company tends to upgrade based on these factors:

• Vulnerabilities, vulnerabilities, vulnerabilities!
• Bugs
• Attaining new features not currently available-- new cards/modules have a "first supported in" IOS version which could be higher than what you have running
• Migrating away from retired release trains
• Matching versions on more recently deployed and similar hardware

A device that is very critical to the infrastructure may not be as aggressively upgraded as one that is less critical. Consideration is given to the role of the device, the redundancy surrounding it, and the impact of the upgrade itself by the downtime incurred or by the possibility of having config feature behavior changes or different defaults when going between major versions. This is the necessity question that also touches on soft costs such as the time and resources to accomplish the upgrades measured against the weight given to each of the factors such as vulnerabilities.

Be sure to subscribe to multiple vulnerability announcement sites such as Cisco PSIRT (Product Security Incident Response Team) and the US Cert (Computer Emergency Readiness Team).

A downgrade might be in order if:

• Organization has a policy to only run tested/QA'd versions and new equipment came with a more recent release.
• Org has a policy against running anything other than GD.

• Use Cisco's Output Interpreter of "show version" to look for obvious issues/vulnerabities/bugs.
• Look for GD (General Deployment) releases and avoid DF (Deferred).
• Use ED (Early Deployment) only when it contains must-have features not available elsewhere.
• Avoid LD (Limited Deployment) when possible and use GD instead.

There are certainly arguments for going to an ED or LD version, but the desire, of course, is to get to the most stable version that meets requirements. Use Cisco's Feature Navigator to help identify potentially different feature-sets (assuming you're licensed to use them).

There are no FastEthernet WICs (only HWICs), and none of the 10/100 network modules are officially supported for the 2600 series (except the 2691 in some cases). While at least one person has reported getting an NM-1FE-TX working in a 2620, the bigger problem you have is that the 2610 has limited throughput capacity, and the benefit you'll see with a 100 Mbps interface over 10 Mbps will depend greatly on your configuration and the type of traffic you push through it. You may be better off looking for an NM-1E or NM-4E 10 Mbps card, both of which are definitely supported on the 2600 series.

Also, bear in mind that this platform and these modules are well past EOL, so you'll likely need to source parts from the used/refurb market.