This read-write object, typed CmAclConfiguration, sets how the device's fixed ACL hardware resource banks are split between Layer-2/IPv4 rules and IPv6 rules, with documented values ranging from all-bk-l2(1), all bank to L2 only, through two-bk-l2-ipv4(3) and one-bk-l2-ipv4(4), to none-bk-l2-ipv4(5), all bank to IPv6. An administrator changes this when the mix of IPv4 versus IPv6 ACL rules needed on the device shifts, since hardware ACL capacity is finite and must be partitioned in advance. For example, a carrier migrating a network to dual-stack service would move this setting from all-bk-l2-ipv4(2) toward two-bk-l2-ipv4(3) to reserve capacity for the growing number of IPv6 filtering rules.