| Business Size ► | Small | Small to Medium | Small to Large | Large |
| License Type ► | LAN Light | LAN Base | IP Base | IP Services |
| Layer 2 | Basic | Enterprise Access | Complete Access | Complete Access |
| Layer 3 | Basic | Basic | Enterprise Access | Complete Access |
| Multicast | IGMP | IGMP | IPv4 and IPv6 PIM Routing | IPv4 and IPv6 PIM Routing |
| Security | Basic | Enterprise Access | Complete Access | Complete Access |
| QoS | Basic | Enterprise Access | Complete Access | Complete Access |
| Layer 2 |
| Basic | 802.1x Web Auth NOT supported, DHCP Snooping NOT supported, Maximum 64 VLANs |
| Enterprise | Cisco documentation says "A wide range of Layer 2"! Maximum 255 VLANs |
| Complete | 802.1q Tunneling |
| Layer 3 |
| Basic | Static IP routing support, support for SVI |
| Enterprise | RIP, EIGRP, stub, OSPF for routed access, PBR, IPv4 & IPv6 EIGRP stub routing, WCCP, IPv6 uRPF, IPv6 PBR, VRRPv3, Policy Classification Engin, HSRP v6 |
| Complete | OSPF, EIGRP, BGP, IS-IS, VRF Lite |
| Security |
| Enterprise | DHCP Snooping, IPSG, DAI, PACLs, Cisco Identity 4.0, NAC and 802.1x features |
| Complete | Router and VLAN ACLs, private VLANs, complete identity security, Cisco TrustSec, SXP and IEEE 802.1AE, Device Sensor |
| QOS |
| Enterprise | Ingress policing, Trust Boundary, AutoQoS, DSCP mapping |
| Complete | Support for all Cisco Catalyst 2000/3000 QoS features, including per-VLAN |