Controlling allowed IP addresses and image differences, C3560G

Discussion in 'Cisco' started by Michael T. Davis, Mar 24, 2007.

  1. We're planning the purchase of a number of C3560G-24TS-S and ...-48TS-S
    switches to upgrade our backbone to GbE capability. Is there a short document
    somewhere which covers the differences between the -S and -E offerings (IP Base
    [formerly SMI] and IP Services [formerly EMI] images, respectively)? All we
    need is support for a few layer-3 access controls to prevent IP addresses that
    aren't defined on our LAN from communicating beyond a port. In particular, we
    want to block the addresses used for "private" LANs defined in RFC1918, but if
    we can just configure things to say "don't let anything through except IPs in
    subnet-a and subnet-b," that would be ideal. (BTW, can anyone comment on how
    DHCP could be supported in such a case?) Will the -S series be enough?

    Thanks,
    Mike
    --
    | Systems Specialist: CBE,MSE
    Michael T. Davis (Mike) | Departmental Networking/Computing
    http://www.ecr6.ohio-state.edu/~davism/ | The Ohio State University
    | 197 Watts, (614) 292-6928
    Michael T. Davis, Mar 24, 2007
    #1
    1. Advertising

  2. Michael T. Davis

    Guest

    On 24 Mar, 22:19, -state.edu (Michael T. Davis) wrote:
    > We're planning the purchase of a number of C3560G-24TS-S and ...-48TS-S
    > switches to upgrade our backbone to GbE capability. Is there a short document
    > somewhere which covers the differences between the -S and -E offerings (IP Base
    > [formerly SMI] and IP Services [formerly EMI] images, respectively)? All we
    > need is support for a few layer-3 access controls to prevent IP addresses that
    > aren't defined on our LAN from communicating beyond a port. In particular, we
    > want to block the addresses used for "private" LANs defined in RFC1918, but if
    > we can just configure things to say "don't let anything through except IPs in
    > subnet-a and subnet-b," that would be ideal. (BTW, can anyone comment on how
    > DHCP could be supported in such a case?) Will the -S series be enough?
    >
    > Thanks,
    > Mike


    >From memory and with assumptions;

    I would be surprised if the standard sw did not meet your
    requirements. You need the extended software for BGP
    but not for OSPF I seem to recall. For sure ACLs are
    in the basic.

    www.cisco.co/go/fn
    Compare Images

    User interface is pretty clunky but there is
    no alternative. This is the official list of
    features.
    , Mar 25, 2007
    #2
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Daniel Prince
    Replies:
    6
    Views:
    593
    Daniel Prince
    Dec 11, 2004
  2. Fatman Superstar

    Controlling MAC Addresses

    Fatman Superstar, Apr 16, 2004, in forum: Cisco
    Replies:
    2
    Views:
    501
    Geert
    Apr 18, 2004
  3. T. Cam

    8k routes on a C3560G?

    T. Cam, May 23, 2007, in forum: Cisco
    Replies:
    0
    Views:
    319
    T. Cam
    May 23, 2007
  4. Rob B

    Help re. colour differences in image viewers...

    Rob B, Aug 25, 2007, in forum: Digital Photography
    Replies:
    30
    Views:
    915
    Rob B
    Sep 1, 2007
  5. Paul
    Replies:
    1
    Views:
    371
    shannon
    Jan 3, 2006
Loading...

Share This Page