Cisco 3750 Vlan config

I am in need of some basic steps in adding 2 new 3750 switch to an existing VLAN network of Stackable switches. The Stackable switches are 5 (WS-C3750X-12S-S ) in numbers.

I have an idea of what to configure if i was handling a 2950 switch. But this is my first attempt on a 3750 switch and don't want to mess it up.

After connecting these 2 new switches to the existing stack, do they automatically learn their number in the stack before any configuration is done?

Secondly, where will the configuration be done from; is it from the Master switch or directly on the new switch?

Normally on a 2950 switch, you configure it as a client in the existing domain and then configure VTP on the linked Ports between the switches before actually adding them to the network. Does that same rule apply?

by default a new switch
out of the box has a switch number of 1. When they
are added to the stack, the master will assign the number
to the switch. This is automatic, but as I've witnessed
in working with these, if you add two switches as
you are wanting to do, it's possible depending on the
rev of hardware (ie processor), the time it takes for
a switch to initialize and announce itself to the stack
can be different. If you add to switches to a five
stack switch, it's possible for the 7th switch to
actually receive the switch number of 6 because it
comes up first. Maybe I'm just paranoid, but I
like to manually change the switch number
(by doing "switch 1 ren XX" here XX is your new
switch number.

After the new switches are brought into the
stack by the master switch, a few seconds to
a minute or two later, the master will shadowcopy
the configuration down to the new members of the stack.

As TomS mentioned, the configuration is taken care of
from the management IP, which the master switch of
the stack will answer to.

You can tell the master two ways, either from the
status light on the front of the switch, or by
doing a "sh sw detail".

If you choose to view from the front of the switch,
you can also push the status button until you have
the stack light lit. At this point each switch in
the stack will flash one of the LED status lights for
the 10/100/1000 (if applicable) ports. This light
port number will reflect the switches number.
Example, switch 1 will flash the Fa1/0/1 light,
switch 2 will flash the Fa1/0/2 LED and so on.

You'll also not that the LED's of your last two
SFP ports will also light. If you have a 48 porter
Gi1/0/3 and Gi1/0/4's lights will light up Green
or Amber. IF you have a 24 port you only have
2 SPF ports unless you have a 3750G model.
These lights tell you the status of your Stackwise
cables and your 32Gig ring. If the ring is intact
both green lights will be on. If there is an issue
with the stackwise cables, one or both of the lights
will be amber. The amber lights show which switches
have issues. The stackwise cables can be touch at times.

If you use the "sh sw detail" you'll get an output like
this;

nocsw064#sh sw
Current
Switch# Role Mac Address Priority State
--------------------------------------------------------
1 Member 0017.941d.a780 15 Ready
*2 Master 0014.698c.af00 10 Ready
3 Member 0011.9307.c480 1 Ready
4 Member 0011.930f.8d80 1 Ready
5 Member 0011.930f.7880 1 Ready
6 Member 0011.930f.9a00 1 Ready

Stack Port Status Neighbors
Switch# Port 1 Port 2 Port 1 Port 2
--------------------------------------------------------
1 Ok Ok 2 3
2 Ok Ok 1 4
3 Ok Ok 5 1
4 Ok Ok 6 2
5 Ok Ok 3 6
6 Ok Ok 5 4

this shows many things, 1) how many switches
are part of the stack and their stack numbers,
2) who is master of the stack, 3) the priority
settings of each switch in the stack.

If you notice in the above, switch 1 has a priority
of 15 with when the stack is coming up, basically forces
switch 1 to be the master. Switch 2 has a priority of
10, which means if something happens to the master
switch 2 will take over the role of stack master.
If you notice there is a '*' next to switch 2's number.
This means it's currently the stack master, since
we had a issue with the master.

If you don't hard code the priority, any switch
in the stack can take over for the master. This
is decided in a election process similar to how a
master browser in windows is elected. UPtime, IOS
rev, MAC address and a few other factors come into
play. Instead of letting this happen we prefer to
hard code.

With the "sh sw detail" you'll see the second
part of the output shows the status of the stackwise
ports as well.

Also one more thing I remember, but didn't mention
earlier. If you're going to use etherchannel to
bundle Fa or Gi ports, this will act the same as
it does on the other switches, with the exception
in the case where you want to bundle ports between
ports of one or two other switches, you'll have to
mess with the WS-C3750V2-48PS-S   PAg protocol, but it is possible.

Newbie choice of Cisco 1900 vs 2900

I have a small office network with 10/100mbps NICs in 15 computers as

well as a few network printers and netcams. The server is running

Windows 2003 and SQL 2000 and also has a 10/100mbs NIC. The database is

somewhat traffic intensive.

I have come into possesion of a Cisco Catylyst Cisco 1900     and a separate

2900. Would there be an advantage to using one of these switches over

the other in this situation?

In article <(E-Mail Removed) .com>,

rbob <(E-Mail Removed)> wrote:

:I have a small office network with 10/100mbps NICs in 15 computers as

:well as a few network printers and netcams. The server is running

:Windows 2003 and SQL 2000 and also has a 10/100mbs NIC. The database is

:somewhat traffic intensive.

;I have come into possesion of a Cisco Catylyst 1900 and a separate

;2900. Would there be an advantage to using one of these switches over

;the other in this situation?

1900: 10 Mbit ports except for 2 uplinks; runs CatOS

2900: 10/100 ports, some models have gigabit; some models run IOS;

some models have Layer 3 operations (i.e., routing); some models

have QoS and rate limiting

2900 covers a large range of capabilities -- too large a range to

use as a family designator. The 2901/2902 were very different than

the 2948G-L3, and quite different again from the 2950. The 2950 is

a current model; the 2901 went end-of-sale in 1999.

I guess my question is with a small network such as mine I could use

the 24 ports of the  Cisco 3925E    compared to the 12 ports of the 2901 but would

there be any speed difference (10mbps of 1900 vs 10/100mbps or 2901) ?

Cannot Find ADSL Firmware 4.0.0.18 for Cisco 1801

I have a number HWIC-1T     of Cisco 1801 routers connected to BT UK’s ADSL2+ Annex-A Wholesale Broadband Connect [WBC] services. The routers are experiencing connectivity issues. There is a cisco product bulletin that defines v4.0.0.18 as the version of ADSL Firmware required on the Cisco 1801 when connecting to this BT service.

I would like to upgrade the ADSL Firmware for these routers but I  cannot find v4.0.0.18 for the Cisco 1801 on CCO. All the 4.0.0.18 downloads appear to  be for various flavours of 800. The Cisco product bulletin shows the 1801 as having the same chipset as the 857,867,877 and 887. Can I use the Firmware from one these 800 models? The MD5 Hash for the code suggests all of the these 800 model use the same code?

Has anybody seen this problem with the Cisco 1801 or upgraded the Firmware to 4.0.0.18.

 Yes, the 1801 use same HW and FW as the 800 and the WS-X45-SUP7L-E  

3750 Connectivity issue

I have a WS-C2960G-24TC-L

with a 1000base LX SFP

connected via single mode to an Incomming gigabit circuit from SSE/Telco (Scottish and Southern Electric)

this configuration works ok.

When i move the connection to a WS-C3750X-12S-S   (with the same sfp) i get no connectivity, no physical or anything,

has anyone seen this before when i do a show interface it does nothing, not connected etc.

Any top tips and handy hots would be appreciated

GigabitEthernet0/22 is up, line protocol is up (connected)

  Hardware is Gigabit Ethernet, address is 0023.052b.a096 (bia 0023.052b.a096)

  MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,

     reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation ARPA, loopback not set

  Keepalive not set

  Full-duplex, 1000Mb/s, link type is auto, media type is 1000BaseLX SFP

  input flow-control is off, output flow-control is unsupported

  ARP type: ARPA, ARP Timeout 04:00:00

  Last input 00:00:09, output 00:00:00, output hang never

  Last clearing of "show interface" counters never

  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

  Queueing strategy: fifo

  Output queue: 0/40 (size/max)

  5 minute input rate 0 bits/sec, 0 packets/sec

  5 minute output rate 108000 bits/sec, 64 packets/sec

     112643 packets input, 51674930 bytes, 0 no buffer

     Received 54673 broadcasts (0 multicasts)

     0 runts, 0 giants, 0 throttles

     1 input errors, 1 CRC, 0 frame, 0 overrun, 0 ignored

     0 watchdog, 54638 multicast, 0 pause input

     0 input packets with dribble condition detected

     56007230 packets output, 26626201288 bytes, 0 underruns

     0 output errors, 0 collisions, 5 interface resets

     0 babbles, 0 late collision, 0 deferred

     0 lost carrier, 0 no carrier, 0 PAUSE output

     0 output buffer failures, 0 output buffers swapped out

 

-------------------------------------------------------------------------------------------------

 

sh int gi1/0/25                          

GigabitEthernet1/0/25 is down, line protocol is down (notconnect)                                                                 

  Hardware is Gigabit Ethernet, address is 2893.fe02.5119 (bia 2893.fe02.5119)                                                                             

  MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,                                               

     reliability 255/255, txload 1/255, rxload 1/255                                                   

  Encapsulation ARPA, loopback not set                                     

  Keepalive not set                  

  Auto-duplex, Auto-speed, link type is auto, media type is 1000BaseLX SFP

  input flow-control is off, output flow-control is unsupported

  ARP type: ARPA, ARP Timeout 04:00:00

  Last input 21:19:20, output 21:19:20, output hang never

  Last clearing of "show interface" counters never

  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

  Queueing strategy: fifo

  Output queue: 0/40 (size/max)

  5 minute input rate 0 bits/sec, 0 packets/sec

  5 minute output rate 0 bits/sec, 0 packets/sec

     21 packets input, 2890 bytes, 0 no buffer

     Received 21 broadcasts (0 multicasts)

     0 runts, 0 giants, 0 throttles

     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored

     0 watchdog, 21 multicast, 0 pause input

     0 input packets with dribble condition detected

     22 packets output, 3480 bytes, 0 underruns

     0 output errors, 0 collisions, 1 interface resets

     0 babbles, 0 late collision, 0 deferred

     0 lost carrier, 0 no carrier, 0 PAUSE output

     0 output buffer failures, 0 output buffers WS-C3750V2-48PS-S   swapped out

Cisco 3560 IOS problem

I have a WS-C3560X-24T-L   switch and I am getting the following error.

Base ethernet MAC Address: 00:1f:c9:96:60:80

Xmodem file system is available.

The password-recovery mechanism is enabled.

Initializing Flash...

flashfs[0]: 452 files, 6 directories

flashfs[0]: 0 orphaned files, 0 orphaned directories

flashfs[0]: Total bytes: 15998976

flashfs[0]: Bytes used: 2176512

flashfs[0]: Bytes available: 13822464

flashfs[0]: flashfs fsck took 8 seconds.

.done Initializing Flash...

Boot Sector Filesystem (bs) installed, fsid: 3

done.

Loading "flash:c3560-ipbase-mz.122-35.SE5/c3560-ipbasemz.122-35.SE5.bin"...flash:c3560-ipbase-mz.12

2-35.SE5/c3560-ipbase-mz.122-35.SE5.bin: no such file or directory

Error loading "flash:c3560-ipbase-mz.122-35.SE5/c3560-ipbase-mz.122-35.SE5.bin"

Interrupt within 5 seconds to abort boot process.

Boot process failed...

The system is unable to boot automatically. The BOOT

environment variable needs to be set to a bootable

image.

Things which i have already tried:

switch:boot

Loading "flash:c3560-ipbase-mz.122-35.SE5/c3560-ipbase-mz.122-35.SE5.bin"...flas

h:c3560-ipbase-mz.122-35.SE5/c3560-ipbase-mz.122-35.SE5.bin: no such file or dir

ectory

Error loading "flash:c3560-ipbase-mz.122-35.SE5/c3560-ipbase-mz.122-35.SE5.bin"

Interrupt within 5 seconds to abort boot process.

When i issue Dir i got the following msg:

List of filesystems currently registered:

flash[0]: (read-write)

xmodem[1]: (read-only)

null[2]: (read-write)

bs[3]: (read-only)

Also Tried dir flash

unable to stat flash/: no such device

I also have ios of that switch and when i am trying to push through X modem i got below msg:

Unknown cmd: Š **B0**B000000000022d

switch: Š*00000002d

Unknown cmd: Š*00000002d

switch: Š**B000000000022d

Unknown cmd: Š**B000000000022d

switch: Š**B000000000022d

Unknown cmd: Š**B000000000022d

switch: Š**B000000

1) flash_init

2) load_helper

Next you need to change the baud rate on the switch, otherwise it will take about 2 hours to transfer the IOS via xmodem.

3) set BAUD 115200

After you issue the baud rate command on the switch make sure you also change it in Hyperterminal or whatever software terminal emulation software you use. Otherwise you won't be able to communicate to the switch.

4) copy xmodem:"image_filename.bin" flash:"image_filename.bin"

5) In Hyperterminal select "Transfer" and select "send file". Change the protocol to xmodem. Next select browse and navigate to where you have stored the IOS that you would like to transfer to the WS-C3560X-24T-S   switch. Click send.

cisco 3560 router or switch!

Opmanager 7 (fresh install, latest version, plenty of server power) has decided to randomly categorise my cisco WS-C3560X-24T-L   series switches as either 'router' or 'switch' depending on its mood.

The ones classed as router come up as 'cisco device' even though in the description field below that box it says 'cisco 3560...blah blah'.

If i then go and change the device type to 'cisco 3560 series switch' i either get page that says 'error' or 'device cannot be found'.. if its the latter its been deleted from the database and i can't re-add it as its partially there....

While adding the device, we will match the sysoid on the device template and based on it, the device type will be applied. So if there are no templates for the device it might be associated wrongly. So to make the cisco 3560 device fall under the right category, create a new template by following the steps in this LINK. Now you can apply the template to all the 3650 devices and it should work fine.

For the device being partially added, follow the steps in this LINK which will remove the device completely from the database. Now add the device again and it should be fine. We will make this template available out of box soon.

If you have the device template already, then you don't have to create one. You can go to the particular template under Admin --> Device templates and apply it to all the cisco 3560 devices. While discovery, if you have multiple credentials selected or if the response for the SNMP request from the device is slow, then it might get timed out and fall under the general cisco device category. Applying the right template all the devices will move to the correct category.

now running a completely clean copy of opmanager, fresh install.

Added 6 devices. 5 of the 3560's went in fine. One became a router so i tried to manually tell it the device was a WS-C3560X-24T-S   and now its vanished again and i can't re-add as apparently its already in the dbase..

Adding new 3750 to stack without provisioning config?

I currently have 3 WS-C3750X-48T-L   in a stack, and would like to add another as a slave. I have read the documentation on Cisco's website, and tutorials on various other websites, and just have a couple of points I would like to clarify before I go ahead.

My main question - is there actually any need, or is it recommended, to use the "switch 4 provision ws-c3750-48p" command before doing the physical connection of the 4th switch to the stack? According to Cisco, this will be done automatically when the new switch is connected anyway?

If I do use that command on the stack before connecting, do I also need to use the command "switch 1 renumber 4" on the new switch before adding it to the stack? Some documentation seems to suggest that it will automatically be assigned to the stack as switch 4, as long as it is the correct type of switch (specified in the provision command on the stack), while other documentation seems to suggest that the number also has to match before it is connected - but maybe I'm reading it wrong!

Another thing I would like to check before going ahead.. at the moment, the switches are connected as follows:

Switch     Port 1     Port 2

1               2               3

2               3               1

3               1               2

To physically add switch 4 to the stack, my plan would be to first disconnect the cable between switch 3 and switch 1. Am I right in thinking that this should not affect the operation of the 3 existing switches/stack, since switch 1 will still be connected to switch 3 via switch 2?

Then, the plan would be to connect the two ports on switch 4 to the now-empty ports on switches 1 and 3 (where the cable that I removed in my previous step used to be), and power it on.

If anyone can clarify this for me, or has any other advice, it would be much appreciated - thanks!

The provision command is useful for PRE-provisioning a switch prior to adding it to a stack. In this way, you can configure all of the switch ports before the switch is ever "really" added. You're right that the switch will automatically do this upon stacking it, however it will be a blank configuration.

To add an additional switch to your stack, please first ensure the stack-ring is in a full-duplex ring. This can be verified via the command: "show switch stack-ring speed". Once you remove one stack cable between switch 1 and 3, the stack will become half-duplex, this is fine for a temporary period of time.

I would take the connection going to switch 3 from switch 1 and put that in your new switch. Then add a new stack cable between  WS-C3750X-48T-S   switch 3 and 4. Then power your new switch on and ensure your stack ring is in a full duplex ring.

Newbie connecting DELL 6248 stack to CISCO 3750 stack

I need to extend the office LAN by connecting an existing CISCO WS-C3750X-12S-S   stack to a new DELL 6248 stack.

I intend to use the fibre/combo port In DELL 6248 to connect to CISCO uplink port.

I want to use DELL port 48 but I saw there were 1/g48 and 1/xg48.  From memory, they are mutually exclusive.

Q1.  Does it mean I will just configure 1/g48 and don't bother going into the config of 1/xg48?

Q2.  To connect the 2 stacks together, should I just define both connecting ports as trunk port?  I have no experience in doing that.  FYI.  We are using VLANs in the CISCO stacks already and so the new DELL stacks need to know about it.

I was able to connect the 2 stacks together, but I am not sure if what I did was correct.

On the existing CISCO stack, I have been using VLAN 1 as the data (untagged) and VLAN 100 as voice (tagged).

On the new DELL stack, I defined 1/g48 (fibre port) as access port and VLAN 100 as the default untagged VLAN.

On the existing CISCO stack, I leave the Gigabit 1/0/4 port to its default which happens to be access mode with 1 as the default VLAN.

I thought what I did was incorrect but anyway I thought I still gave it a go and I was able to plug a PC into the DELL stack and do the normal "data" stuff without any problems.

Q1.  So, does it mean that even if the VLAN nos do not match on the connecting ports, it does not really matter?

Is this correct?

a) On the DELL stack, I configured the 1st fibre port as below:

#show interfaces switchport ethernet 1/g48

Port: 1/g48

VLAN Membership mode:Access Mode

Operating parameters:

PVID: 100

Ingress Filtering: Enabled

Acceptable Frame Type: Untagged

Default Priority: 0

GVRP status:Disabled

Protected:Disabled

Port 1/g48 is member in:

VLAN    Name                              Egress rule   Type

----    --------------------------------- -----------   --------

100     Data                              Untagged      Static

Static configuration:

PVID: 100

Ingress Filtering: Enabled

Acceptable Frame Type: Untagged

Port 1/g48 is statically configured to:

VLAN    Name                              Egress rule

----    --------------------------------- -----------

100     Data                              Untagged

Forbidden VLANS:

VLAN    Name

----    ---------------------------------

b) On the CISCO stack, I configured the fibre port as below:

Name: Gi1/0/4

Switchport: Enabled

Administrative Mode: static access

Operational Mode: static access

Administrative Trunking Encapsulation: negotiate

Operational Trunking Encapsulation: native

Negotiation of Trunking: Off

Access Mode VLAN: 1 (default)

Trunking Native Mode VLAN: 1 (default)

Administrative Native VLAN tagging: enabled

Voice VLAN: none

Administrative private-vlan host-association: none

Administrative private-vlan mapping: none

Administrative private-vlan trunk native VLAN: none

Administrative private-vlan trunk Native VLAN tagging: enabled

Administrative private-vlan trunk encapsulation: dot1q

Administrative private-vlan trunk normal VLANs: none

Administrative private-vlan trunk private VLANs: none

Operational private-vlan: none

Trunking VLANs Enabled: ALL

Pruning VLANs Enabled: 2-1001

Capture Mode Disabled

Capture VLANs Allowed: ALL

Protected: false

Unknown unicast blocked: disabled

Unknown multicast blocked:  WS-C3750V2-48PS-S    disabled

Appliance trust: none

Cisco 3750 =>blocking dhcp trafic on an interface

At work I've got a cisco WS-C3750V2-24PS-S   switch and few end devices which of course are company proprietary, connected to this switch in a separate VLAN. Now these end devices generate dhcp traffic "request" and is being propagated across all the sites where these devices are connected.

     Now I've been reading stuff about dhcp snooping features which is great but in this instance these end devices don't have a DHCP server. In this scenario all these end end devices have got static ip addresses allocated.

    Also my senior engineer being very narrow minded wants me to implement this change only on the interface level and not on the configuration level.

     Can someone please confirm if I can just only enable "ip dhcp snooping trust" on the interface level which i believe will stop the dhcp traffic ??

I'd only enable "ip dhcp snooping Vlan 10" in the global config.

So after enabling "ip dhcp snooping Vlan 10" in the global config , the switch will only stop DHCP traffic, correct ??

I am a little pedantic  since i've never performed this setting on a cisco  WS-C3750X-24P-S  switch before and would really appreciate input of experienced people !!

Configuring SNMPv3 for Cisco 3560X

I am using OpManager ver 9101.

Recently installed a Cisco WS-C3560X-24T-L   switch and wanted to test using SNMPv3 to manage the switch.

The following are the commands used on Cisco 3560X:-

snmp-server group OpMgrGrp v3 priv

snmp-server user OpMgrUser OpMgrGrp v3 auth sha ABC priv aes 128 DEF

snmp-server context opmanager

I created the credentials using OpMgrUser with SHA ABC and AES DEF, and context opmanager in OpManager.

Then try to add device, but it is trying until timeout and failed to add the device.

If I use the following command, then OpManger added the device successfully.

snmp-server community public RO 99

Which context name should I put in OpManager credential?

If you have followed the KB WS-C3560X-24T-S , you can leave it blank.

Cisco Catalyst 3750 PoE Issue

we have a 3-switch stack (1x WS-C3750V2-24PS-S    48-port w/no PoE on top, and 2x 3750 48-port PoE underneath). We have PoE IP phones that are all functioning. I recently acquired 2 Engenius EAP9550s to add as repeaters for an expansion of our office. When I connect the APs (in PoE mode on the switches), the indicator for each AP turns green and the APs power up, briefly.

After about 10 seconds, the indicator LED on the switch turns amber. At this point, almost all of the indicators are amber on this bottom switch, they all changed to amber after I tried the APs in them. We have about 5 PoE phones connected to it (the remainder are on the middle PoE 3750)

The device specs state that each AP runs at about 18W (48 VDC x 375 mA)

I can't imagine that I am hitting my wattage limit per switch with the small number of phones that are connected to that particular switch, but the indicator code seems to imply the switch is denying PoE for these ports due to the 350W limit. I don't see any voltage limits in the spec sheet for the switch so I am at a loss.

So, when the switches are stacked, is there a different limit? Or does each switch have its own individual limit? Do I need a booster? I was under the impression the APs would function fine, we have a separate AP on a different physical network with the identical switch setup and it works just fine. PoE is enabled in the port specifications for every port on all of our PoE switches (its the default but I double-checked to be sure).

Do you actually need Power over Ethernet for all of the ports that have it active? If not turn off the extras as you don't need the power drain...

Are these switches connected to a UPS system and is that system throwing any warnings or errors? It could be that you are actually running out of available power with all the ports and switches and such connected in the same place...

Also, how is the power getting into the switches? You're not trying to chain feed it from one to the next right? They each have their own AC adapters correct?

We need the option since the IP phones we have are pass-through switches for our non VoIP traffic - i.e. VLAN 9 - VoIP, VLAN 8 Data, both through the same port and it needs PoE for the phone to power on and provide the passthrough switching.

We have 3 UPSs running at 30% capacity each according to the management consoles, no warnings. That was the first thing I checked, each switch is plugged directly into a PDU and it is all load balanced, no chaining at all.

If there is a non-PoE (or no device at all) plugged into the PoE switch, does it drain more power than designating the port as non-PoE? I thought the switches automatically determined power requirements.

I figured the same thing regarding the circuit, but there is nothing else plugged in to this particular switch aside from 5 PoE IP phones and the 2 APs.

Switching the positions of the switches would be a task, so I haven't tried it. I picked up 2xGb PoE Boosters for cheap to see if they fix the problem. Thinking about the stack, they are all trunked, but they each have dedicated power supplies so I can't imagine the stack would have a more limited Wattage than the sum of the 3 switches  WS-C3750X-24P-S  . We shall see, thanks for helping me brainstorm!

Ios update for 3560-C

I plan to buy WS-C3560X-24T-L   (Catalyst 3560-C) for my home lab. I just created a new account on cisco.com (I did not register any equipment or contract for that new account). I was able to download ios 12 and 15 for that switch.

Will I be able to flash one of these versions when I will have the new switch ?

Cisco warranty for these Switchs (Enhanced Limited Lifetime Hardware Warranty, www.cisco-servicefinder.com/warrantyfinder.aspx) says NO OS Software Updates included. Does tha mean that I can download ios updates but won't be able to flash the device or use it ?

- Do I really have to buy Smartnet support to be able to update ios for that switch ?

Hello just to answer some of your points.

- Everybody with an cisco account and without contract can download universal ios. The universal ios file can't be used without an proper license. So it doesn't matter

Maybe this is the case, may just come with a base feature set. Ip base or LAN base?

- 3560CG comes with an IP Base license and can't be upgraded to IP Services

It can be upgraded to ip services. You need the correct image or license, depending on which major version you go with, I.e. 12 or 15.

12 you can download the correct firmware with the feature set, with 15 you need a license.

- So I suppose that I will be able to update 3560CG with any universal ios version and "stay" at IP Base level

Depending on what feature set the universal image has without licenses. I assume its base.

- Smartnet is required if you need support (TAC) or quick (4, 8 hours) hardware replacement

Yes I believe so, although I think the thing you call smartnet, I call Cisco service support contract..?

- Smartnet is not required for normal (days) hardware replacement as WS-C3560X-24T-S   warranty is lifetime of the product (except power for 5 years)

This information should all be in the service support contract.