I'm trying to determine how much performance hit I can expect on a 2950-48 with port ACLs on every interface. Is this something that's handled on some ASIC or in CPU? Or is this even an issue?