The access control list (ACL) daughter cards implement data-plane access lists in hardware, providing line-rate and near-line-rate performance. This extends the traffic control and security capabilities of the Catalyst 8510/LightStream 1010 beyond control-plane access lists, which are currently supported.The ACL daughter cards can be used with existing 10/100-Base-TX, 100-Base-FX, and Gigabit Ethernet interface modules on the Catalyst 8510/LightStream 1010. The daughter cards will provide data-plane ACL functionality for both IP and IPX traffic. The ACL daughter card can be used to limit/grant access to certain network resources by filtering traffic based on the Layer 3 header. It is designed specifically to meet the demanding needs of large enterprise and service provider networks.