traffic that has any the mac addresses specified in the layer 3 device list is treated as coming from a remote network, and the layer 3 detection mode is used.
Traffic that does not have any of the MAC addresses specified in the layer 3 device list is treated as coming from a local network.