I upgraded a couple of C3560CX's to 15.2(7)E6 recently. Its a routed access switch with three VLANs/SVIs - Data, Voice & Guest. The Guest SVI has an inbound ACL attached that permits DNS, DHCP and a couple of other things to the LAN. There is then...