Why not run your server on a private address i.e. 192.168.100.X and your clients on VLAN2 on 192.168.50.X, then statically NAT your server inbound/outbound with your clients overloaded? You can then create ACL's to stop any cross traffic on the inte...
There is no need to upgrade the switches one at a time. All you need to do is use the archive command and TAR file to the master and the rest will upgrade automatically.See reference here:http://www.cisco.com/en/US/partner/products/hw/switches/ps502...