ACL refers to a list IP addresses, both origin and destination, and ports where traffic is permitted to pass. The *router* does this? Access control lists can generally be configured to control both inbound and outbound traffic, and in this context they are similar to firewalls. How are they different from firewalls, is at all? Is the ACL just the "firewall settings"?
Link to How to Request Firewall Changes
VLAN is a list of IP addresses that you control. This means that you can control access to those IP addresses. You can assign these addresses as you like. Traffic within a VLAN is encrypted 
How?
...