(L2) Switches with incoming src-address ACL's

[Wouter de Jong]

Hi,

Does anyone know on which (access-) (L2) switches you can 
actually put an ACL to only allow incoming traffic with a 
source-address (IPv4 and IPv6) that is assigned to the device behind it ? 
(port-based would be the only useable option)
 
VMware vSphere vSwitches probably can't do this kind of filtering, 
anyone who knows if the Cisco Nexus 1000V can do it ?
What is this 'feature' usually called like, if it exists at all ?

Eg. needed for co-location where servers of different customers are 
in a shared subnet and renumbering is not an option. 

Thanks for any clue's.

Regards,

Wouter