This may be a dumb question, but is there any need/benefit to using Switch ACLs instead of or in addition to Layer 3 FW rules? The Layer 3 rules seem much simpler to configure and maintain. Is this primarily meant to be used for in deployments without an MX or are there use cases for using ACLs along with Layer 3 FW rules?
Since the MX is preforming the routing, it is definitely a better option to use Layer 3 firewall rules rather than the ACL. The L3 rules are a little different than other firewall/router rules, but overall much easier than the MS ACLs.
CMNO, CCNA R+S
Get notified when there are additional replies to this discussion.