• LAN-Lite
• LAN-Base
• IP-Base
• IP-Services
• IP-Advanced-Services

• Cisco Catalyst 2960-S and 2960 Series Switches with LAN Base Software
• Cisco Catalyst 3560 Series Switches Data Sheet
• Cisco Catalyst 3750 Series Switches Data Sheet

• The Cisco Catalyst 3560 Series can be purchased with the IP Base or IP Services licenses pre-installed.
• The IP Base license (formerly called the Standard Multilayer Image, or SMI) offers advanced QoS, rate limiting, ACLs, and basic static and Routing Information Protocol (RIP) routing functions.
• The IP Services license (formerly called the Enhanced Multilayer Image, or EMI) provides a richer set of enterprise-class features, including advanced hardware-based IP unicast and IP Multicast routing as well as policy-based routing (PBR).
• The Advanced IP Services license, although not available as a pre-installed option, upgrades Cisco Catalyst 3560 Series switches to include IPv6 routing and IPv6 ACL support.
• Upgrade licenses are available to upgrade a switch from the IP Base license to the IP Services license or Advanced IP Services license as well as from the IP Services license to the Advanced IP Service license.

• Basic IP unicast routing protocols (static, RIPv1, and RIPv2) are supported for small-network routing applications.
• IPv6 unicast routing capability (static, RIP, and OSPF protocols) forwards IPv6 traffic through configured interfaces (requires the Advanced IP Services license).
• Advanced IP unicast routing protocols (OSPF, Interior Gateway Routing Protocol [IGRP], EIGRP, and Border Gateway Protocol Version 4 [BGPv4]) are supported for load balancing and constructing scalable LANs. The IP Services license is required.
• Policy-Based Routing (PBR) allows superior control by enabling flow redirection regardless of the routing protocol configured. The IP Services license is required.

• Cisco IOS Quality of Service Solutions Configuration Guide, Release 12.2
  → http://www.cisco.com/en/US/docs/ios/12_2/qos/configuration/guide/fqos_c.html

• Cisco 3560 switch software configuration guides
• Cisco 2960 switch software configuration guides
• Release Notes for the Catalyst 3750, 3560, and 2960 Switches, Cisco IOS Release 12.2(50)SE and Later
• Cisco IOS IP Command Reference, Volume 1 of 3: Addressing and Services, Release 12.2
• Cisco Gigabit Ethernet Transceiver Modules Compatibility Matrix

• PDF: Performance Routing (PfR) Overview - Jan 2008
• http://www.cisco.com/go/pfr

• Cisco IOS Firewall

• Zone-Based Policy Firewall Design and Application Guide

• The Cisco IOS Firewall Feature Set

• Context-Based Access Control = CBAC (=statefull FW)

The Context-Based Access Control (CBAC) feature inspects TCP and UDP 
packets at the application layer. CBAC monitors all the outgoing 
requests by creating temporary openings for outbound traffic at the 
firewall interface. The return traffic is allowed in only if it is 
the part of the original outgoing traffic. CBAC inspects all the 
outgoing packets and maintains state information for every session. 
CBAC then decides whether to deny or permit the incoming traffic, 
based on its state information.

• Undocumented Cisco Commands → http://www.elemental.net/~lf/undoc/

• Using SNMP to tell Cisco to copy config to tftp:
  → Moving Files and Images Between a Router and TFTP Server via SNMP
• Cisco - Access Control Lists: Overview and Guidelines

• Cisco_PIX
• Cisco_ASA
• Cisco ASA 5500 - Configuration Examples and TechNotes
• Cisco PIX 500 - Configuration Examples and TechNotes
• PIX/ASA 7.x: Port Redir(Forward) with nat, global, static and access-list cmds
• ASA/PIX 7.x: Redundant or Backup ISP Links Configuration Example
• Book: Cisco ASA and PIX Firewall Handbook
• Cisco VPN Client on PIX or ASA

• Configuring Commonly Used IP ACLs