I needed to set the NTP, change the time, and verify everything was all set on a few of the switches around the office. I also changed the timezone.

#show clock
18:36:39.993 UTC Mon Dec 10 2012

conf t
clock timezone CST -6
exit
clock set 18:36:39 CST 10 Dec 2012
#show clock
18:36:39.993 CST Mon Dec 10 2012

conf t
ntp server 0.north-america.pool.ntp.org
ntp server 1.north-america.pool.ntp.org
exit
show ntp associations
show ntp status

So I wanted to disable telnet and enable SSH only on the switches – take my 2950 and 3560 switches and change the following:
Change the hostname and generate the crypto keys
conf t
hostname HOSTNAMEHERE
ip domain-name HOSTDOMAINHERE
crypto key generate rsa
If this command does not work then you need to update to a K9 or crytographic IOS!
end
show ip ssh
wr mem

Enable the AAA authentication
conf t
service password-encryption
aaa new-model
aaa authentication login default local
aaa authorization exec default local
aaa authorization network default local
exit

Create the User
conf t
username CISCO password PASSWORD
end

Create passwords
conf t
enable secret PASSWORD
line con 0
password PASSWORD
line vty 0 4
no password
transport input ssh
line vty 5 15
no password
transport input ssh
exit

Set SSH arguments
conf t
ip ssh version 2
ip ssh time-out 60
ip ssh authentication-retries 2

I have a C3560G-24-TS that I needed to upgrade to the newest version with K9 instead of MZ (so I could enable crypto SSH).

Verify your version
show version

System image file is “flash:c3560-ipbase-mz.122-50.SE5/c3560-ipbase-mz.122-50.SE5.bin”

View the files on your flash drive
dir flash:
In my case I had a folder called “c3560-ipbase-mz.122-50.SE5” with “c3560-ipbase-mz.122-50.SE5.bin” located inside
Also, the newest IOS required 15,072,310 bytes available and my switch had over 20MB free. If I had less than 15MB available I would have to delete the old configuration first.

Copy the old file from your switch to your TFTP
copy flash: tftp:

Source filename: c3560-ipbase-mz.122-50.SE5/c3560-ipbase-mz.122-50.SE5.bin
Address or name of remote host: 192.168.1.222 (your TFTP server)
Destination filename: I just hit enter with the defaults

Copy the new file from your TFTP to your Switch
copy tftp: flash:

Address or name of remote host: 192.168.1.222 (your TFTP server)
Source filename: c3560-ipbasek9-mz.122-58.SE2.bin
Destination filename: I just hit enter with the defaults

Verify the file has been uploaded
dir flash:
Technically you should be able to run verify flash:filenamehere, but I was receiving errors

Change the boot image to the new file
show boot
– notice the BOOT path-list is flash:c3560-ipbase-mz.122-50.SE5/c3560-ipbase-mz.122-50.SE5.bin
conf t
boot system flash:c3560-ipbasek9-mz.122-58.SE2.bin
exit
show boot

– notice the new BOOT path-list is flash:c3560-ipbasek9-mz.122-58.SE2.bin

wr mem
show version

Reload/Reboot the switch
reload
show ver