Similar to L4 ports, ACL rules can be configured to filter ingress packets based on their IP length (present in the IPv4

Static NAT rules may optionally include an access list to filter the packets to be translated.