erprise subset (formerly bpx, includes protocol translation)
　　*** not used until 10.3 ***
　　
　　
　　k
　　k kitchen sink (enterprise for high-end) (same as bx) (Not used after 10.3)
　　k1 Baseline Privacy key encryption (On 11.3 and up)
　　k2 high-end enterprise w/CIP2 ucode (Not used after 10.3)
　　k2 Triple DES (On 11.3 and up)
　　k3 56bit SSH encryption
　　k4 168bit SSH encryption
　　k5 Reserved for future encryption capabilities (On 11.3 and up)
　　k6 Reserved for future encryption capabilities (On 11.3 and up)
　　k7 Reserved for future encryption capabilities (On 11.3 and up)
　　k8 Reserved for future encryption capabilities (On 11.3 and up)
　　k9 Reserved for future encryption capabilities (On 11.3 and up)
　　　
　　
　　
　　
　　
　　
　　l
　　l IPeXchange IPX, static routing, gateway
　　
　　
　　m
　　m RMON (11.1 only)
　　m Catalyst 2820-kernel, parser, ATM signaling, Lane Client, bridging
　　
　　
　　n
　　n IPX
　　
　　
　　o
　　o Firewall (formerly IPeXchange Net Management)
　　o2 Firewall (3xx0)
　　o3 Firewall with ssh (36x0 26x0)
　　
　　
　　p
　　p Service Provider (IP RIP/IGRP/EIGRP/OSPF/BGP, CLNS ISIS/IGRP)
　　p2 Service Provider w/CIP2 ucode
　　p3 as5200 service provider
　　p4 5800 (Nitro) service provider
　　p5 Service Provider (6400 NRP)
　　p7 Service Provider with PT/TARP (2600, 3640)
　　
　　
　　q
　　q Async
　　q2 IPeXchange Async
　　
　　
　　r
　　r IBM base option (SRB, SDLLC, STUN, DLSW, QLLC) - used with
　　i, in, d (See note below.)
　　r2 IBM variant for 1600 images
　　r3 IBM variant for Ardent images (3810)
　　r4 reduced IBM subset with BSC/MIB, BSTUN/MIB, ASPP/MIB, RSRB/MIB removed.
　　
　　
　　s
　　s source route switch (SNMP, IP, Bridging, SRB) (10.2 to 11.1)
　　s Additions by Platform via PLUS packs
　　
　　c1000 (OSPF, PIM, SMRP, NLSP, ATIP, ATAURP, FRSVC, RSVP, NAT)
　　c1005 (X.25, full WAN, OSPF, PIM, NLSP, SMRP, ATIP, ATAURP, FRSVC, RSVP, NAT)
　　c1600 (OSPF, IPMULTICAST, NHRP, NTP, NAT, RSVP, FRAME_RELAY_SVC)
　　AT "s" images also hav