Dell Configuration Guide for the S4048–ON System 9.14.2.4

If both L2 and L3 ACLs are applied to an interface, the following rules apply:

• When Dell EMC Networking OS routes the packets, only the L3 ACL governs them because they are not filtered against an L2 ACL.
• When Dell EMC Networking OS switches the packets, first the L3 ACL filters them, then the L2 ACL filters them.
• When Dell EMC Networking OS switches the packets, the egress L3 ACL filters the packet.

For the following features, if you enable counters on rules that have already been configured and a new rule is either inserted or prepended, all the existing counters are reset:

• L2 ingress access list
• L3 egress access list
• L2 egress access list

If a rule is simply appended, existing counters are not affected.

Table 1. L2 and L3 Filtering on Switched PacketsL2 and L3 Filtering on Switched Packets

L2 ACL Behavior	L3 ACL Behavior	Decision on Targeted Traffic
Deny	Deny	L3 ACL denies.
Deny	Permit	L3 ACL permits.
Permit	Deny	L3 ACL denies.
Permit	Permit	L3 ACL permits.

For information about MAC ACLs, refer to Layer 2.