In our main building there are 6 closets, 5 of which have a 2960 stack.
In the past, when configuring switches in these closets, we have always used port-based ACLs inbound and never had any issues due to ACLs.
We also prefer port-based (PACL) over v...