We're planning the purchase of a number of C3560G-24TS-S and ...-48TS-S switches to upgrade our backbone to GbE capability. Is there a short document somewhere which covers the differences between the -S and -E offerings (IP Base [formerly SMI] and IP Services [formerly EMI] images, respectively)? All we need is support for a few layer-3 access controls to prevent IP addresses that aren't defined on our LAN from communicating beyond a port. In particular, we want to block the addresses used for "private" LANs defined in RFC1918, but if we can just configure things to say "don't let anything through except IPs in subnet-a and subnet-b," that would be ideal. (BTW, can anyone comment on how DHCP could be supported in such a case?) Will the -S series be enough?
Thanks, Mike
-- | Systems Specialist: CBE,MSE Michael T. Davis (Mike) | Departmental Networking/Computing