- only support numbered ACLs
- only support extended ACLs
- can only filter Layer 2 traffic
- no support of ACLs that filter IPv6 packets
- no filtering of outbound traffic
Explanation: PACLs have some limitations and restrictions. PACLs do not support filtering of outbound traffic on an interface and they do not support ACLs filtering IPv6. Also, PACLs do not support Layer 2 control packets like STP, CDP, or VTP and are only supported in hardware.