Use (ip and filter) or (vlan and filter)