pass tags when creating network acl