Question: Have you ever used [MarkMonitor](http://markmonitor.com/) for DNS management? I've just started dealing with them recently for a customer who uses them as an aggregator to purchase their domain names and it seems to me that their service is not really up to standards.

I guess I'm curious if I'm the only one who's had a bad experience with them or are their tools and services really a little bit crude and outdated?

Also, I'm interested if you could suggest any alternative services for Domain Name management and DNS hosting that are at least decent.

Answer: 
If you use a `vlan filter` command to apply an access-map to a vlan N all Layer 2 and Layer 3 traffic will be filtered by the access-map when entering the vlan N.  

I recommand you to read <http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/configuration/guide/vacl.html#wp1037197> for a very complete information of how vlan ACL works.
Usually you need to bind maps/ACLs to an interface. In your case (L3-Switch), this interface should be a VLAN-pseudo-interface (conf t -> int vlan 111) rather than an actual ethernet port.

Could you paste the relevant part of the config?