Restrictions for Security Group Access Control Lists (SGACL) Policies
The following restriction apply to the Cisco Catalyst 3650 Series Switches and Cisco Catalyst 3850 Series Switches:
-
CTS SGACLs cannot be enforced for punt (CPU bound) traffic due to hardware limitations.