I think the limit was 32 but I don't remember now. How did it go and did it resolve the issue?

We eventually solved our issue. It was caused by the ACL name being too long and our problem was permanently resolved after that change.

I mean 3650 switches.

We are hitting this bug also. Anybody know of a fixed version in the 16.X train for 3560 switches?

Same issue. Can't interpret this output: HEN-Internet-2911#show int gi 0/0GigabitEthernet0/0 is up, line protocol is up  Hardware is CN Gigabit Ethernet, address is 24e9.b33b.d9d0 (bia 24e9.b33b.d9d0)  Description: Downlink to Internal-DMZ-External S...