As an example, what I'm trying to accomplish is to prevent two hosts on the same subnet from pinging each other. I prefer to use VACL due to hardware filtering performance and the ability to ACL L2 (same subnet) and L3 traffic but the 2950 doesn't a...