C3560ipservicesk9mz1502se11bin May 2026
With IP Base, you are stuck with static routes. With ipservices:
Switch(config)# router ospf 1
Switch(config-router)# network 10.0.0.0 0.255.255.255 area 0
Switch(config-router)# passive-interface default
Switch(config-router)# no passive-interface vlan 100
This turns the 3560 into a true L3 switch.
The IP Services image is the most feature-rich IOS for the Catalyst 3560. It includes everything from the base LAN Base and IP Base images, plus:
Comparison table:
| Feature | LAN Base | IP Base | IP Services | | :--- | :--- | :--- | :--- | | Static routing, RIP | Yes | Yes | Yes | | OSPF, EIGRP (stub) | No | Yes | Yes | | Full EIGRP, BGP, IS-IS | No | No | Yes | | IPv6 routing | No | Limited | Full |
SE11 was among the last software releases Cisco published for the 3560 before terminating support. As a result, it contains cumulative bug fixes back to 15.0(1). If you are running any image prior to SE11 (e.g., 12.2(55) or 15.0(1)SE), upgrading to c3560ipservicesk9mz1502se11.bin is the final and most secure destination.
Switch# copy running-config tftp: # Provide TFTP server IP and filename (e.g., 3560-backup-config.txt)
Switch# copy tftp://192.168.1.100/c3560ipservicesk9mz1502se11.bin flash:c3560ipservicesk9mz1502se11bin
Wait for the !!!!!!!!!!!!!! confirmation. Verify with verify /md5 flash:c3560ipservicesk9mz1502se11.bin (Cisco provides MD5 on download page).
No firmware is perfect. Even with SE11, the 3560's 64MB DRAM (128MB on -G models) means: With IP Base, you are stuck with static routes
| Field | Value | Meaning |
| :--- | :--- | :--- |
| Platform | c3560 | Cisco Catalyst 3560 Series switches |
| Feature Set | ipservicesk9 | IP Services + Crypto (K9 = 3DES/AES encryption) |
| Format | mz | Runs from RAM (not compressed flash) |
| Release | 150-2.SE11 | IOS version 15.0(2)SE11 |
| Extension | .bin | Binary executable image |
Note: The string
1502se11is an alternative concatenation of150-2.SE11.