you don't need layer 3 device, will work fine on layer 2 switch as long ip & gateway are configured. For eg. on Cisco 2960G switch. c2960#sh mac address-table interface gi0/3          Mac Address Table-------------------------------------------Vlan  ...

At the minimum this will work conf thostname c2960!enable secret cisco !!ip domain-name c2960.localcrypto key generate rsa general-keys modulus 2048ip ssh version 2username cisco privilege 15 password ciscoaaa new-modelaaa authentication login defaul...

! aaa new-model!aaa authentication login default localaaa authentication enable default enable is missing