Is the packet filter on the F5 LTM version 11 the same as a CSS ACL? (See below example)

You've a few options;

1) Yes, a packet filter could do this and it could be assigned to one or more VLANs but without AFM (see 3) you won't be able to use object groups in your filters

2) An iRule applied to one or more Virtual Servers could also be used

3) You could use AFM but this is probably overkill

I wonder, is this for service traffic or required for management traffic?