Cisco Cisco IOS Software Release 12.2(35)SE

You should review this section before you begin working with the switch module. These are known 
limitations that will not be fixed, and there is not always a workaround. Some features might not work 
as documented, and some features could be affected by recent changes to the switch module hardware 
or software.

This section contains these limitations:

Unless otherwise noted, these limitations apply to the Catalyst Switch Module 3110G, 3110X, and 3012:

This is the access control list (ACL) limitation:

When a MAC access list is used to block packets from a specific source MAC address, that MAC address 
is entered in the switch module MAC-address table.

The workaround is to block traffic from the specific MAC address by using the mac address-table static 
mac-addr vlan vlan-id drop global configuration command. (CSCse73823)

This is an Address Resolution Protocol limitation:

The switch module might place a port in an error-disabled state due to an Address Resolution Protocol 
(ARP) rate limit exception even when the ARP traffic on the port is not exceeding the configured limit. 
This could happen when the burst interval setting is 1 second, the default.

The workaround is to set the burst interval to more than 1 second. We recommend setting the burst 
interval to 3 seconds even if you are not experiencing this problem.(CSCse06827))