C3560-ipservicesk9-mz.150-2.se11.bin -

1. Backup current config:
   copy running-config tftp://192.168.1.10/3560-backup.txt
This image is the final rebuild of 15.0(2)SE. It includes cumulative fixes for:

Security advisories fixed in SE11 (from Cisco PSIRT):


This image allows VRF-Lite – useful for management isolation or simple MPLS PE simulation. C3560-ipservicesk9-mz.150-2.se11.bin
Example config:
ip vrf CUSTOMER_A
 rd 65000:100
 route-target export 65000:100
 route-target import 65000:100
!
interface GigabitEthernet0/10
 ip vrf forwarding CUSTOMER_A
 ip address 10.1.1.1 255.255.255.0
!
router bgp 65000
 address-family ipv4 vrf CUSTOMER_A
  neighbor 10.1.1.2 remote-as 65001


Note: VRF-lite on 3560 supports BGP/OSPF/EIGRP within VRF but no MPLS. Security advisories fixed in SE11  (from Cisco PSIRT):

show version
show license
show boot
show ip interface brief
show vlan
show flash:

show version
show flash

Ensure the target switch has enough free flash space (at least 20 MB free).
If you own a 3560E or 3560X, you can upgrade to: This image allows VRF-Lite – useful for management

But for the base 3560, SE11 is the final stop.

Every character in this filename is a confession of purpose.