i4 subset of IP (5200)

　　ipss7 IP subset with SS7 (2600)

　　j

　　j enterprise subset (formerly bpx, includes protocol translation)

　　*** not used until 10.3 ***

　　k

　　k kitchen sink (enterprise for high-end) (same as bx) (Not used after 10.3)

　　k1 Baseline Privacy key encryption (On 11.3 and up)

　　k2 high-end enterprise w/CIP2 ucode (Not used after 10.3)

　　k2 Triple DES (On 11.3 and up)

　　k3 56bit SSH encryption

　　k4 168bit SSH encryption

　　k5 Reserved for future encryption capabilities (On 11.3 and up)

　　k6 Reserved for future encryption capabilities (On 11.3 and up)

　　k7 Reserved for future encryption capabilities (On 11.3 and up)

　　k8 Reserved for future encryption capabilities (On 11.3 and up)

　　k9 Reserved for future encryption capabilities (On 11.3 and up)

　　l

　　l IPeXchange IPX, static routing, gateway

　　m

　　m RMON (11.1 only)

　　m Catalyst 2820-kernel, parser, ATM signaling, Lane Client, bridging

　　n

　　n IPX

　　o

　　o Firewall (formerly IPeXchange Net Management)

　　o2 Firewall (3xx0)

　　o3 Firewall with ssh (36x0 26x0)

　　p

　　p Service Provider (IP RIP/IGRP/EIGRP/OSPF/BGP, CLNS ISIS/IGRP)

　　p2 Service Provider w/CIP2 ucode

　　p3 as5200 service provider

　　p4 5800 (Nitro) service provider

　　p5 Service Provider (6400 NRP)

　　p7 Service Provider with PT/TARP (2600, 3640)

　　q

　　q Async

　　q2 IPeXchange Async

　　r

　　r IBM base option (SRB, SDLLC, STUN, DLSW, QLLC) - used with

　　i, in, d (See note below.)

　　r2 IBM variant for 1600 images

　　r3 IBM variant for Ardent images (3810)

　　r4 reduced IBM subset with BSC/MIB, BSTUN/MIB, ASPP/MIB, RSRB/MIB removed.

　　s

　　s source route switch (SNMP, IP, Bridging, SRB) (10.2 to 11.1)

　　s Additions by Platform via PLUS packs

　　c1000 (OSPF, PIM, SMRP, NLSP, ATIP, ATAURP, FRSVC, RSVP, NAT)

　　c1005 (X.25, full WAN, OSPF, PIM, NLSP, SMRP, ATIP, ATAURP, FRSVC, RSVP, NAT)

　　c1600 (OSPF, IPMULTICAST, NHRP, NTP, NAT, RSVP, FRAME_RELAY_SVC)

　　AT "s" images also have