D-Link DES-7200 Cli Reference Manual page 1032

Chapter 54 ACL Configuration Commands
[sn] permit [protocol | [ethernet-type][ cos [out] [inner in]]] [VID [out][inner in]] {source
source-wildcard | host source | any} {host source-
destination-wildcard | host destination | any} {host destination-mac-address | any}
[precedence precedence] [tos tos][fragments] [time-range time-range-name]

When you select the Ethernet-type field or cos field:
[sn] permit {ethernet-type| cos [out] [inner in]} [VID [out][inner in]] {source
source-wildcard | host source | any} {host source-mac-address | any } {destination
destination-wildcard | host destination | any} {host destination-mac-address | any}
[time-range time-range-name]

When you select the protocol field:
[sn] permit protocol [VID [out][inner in]] {source source-wildcard | host Source | any}
{host source-mac-address | any } {destination
destination-wildcard | host destination | any} {host destination-mac-address | any}
[precedence precedence] [tos tos]
[fragments] [time-range time-range-name]
Extended expert ACLs of some important protocols:

Internet Control Message Protocol (ICMP)
[sn] permit icmp [VID [out][inner in]] {source source-wildcard | host source | any}
{host source-mac-address | any } {destination destination-wildcard
destination | any} {host destination-mac-address | any}[ icmp-type ] [[icmp-type
[icmp-code ]] | [ icmp-message ]] [precedence precedence] [tos tos] [fragments]
[time-range time-range-name]

Transmission Control Protocol (TCP)
[sn] permit tcp [VID [out][inner in]]{source source-wildcard | host Source | any} {host
source-mac-address | any } [operator port [port]] {destination destination-wildcard |
host destination | any} {host
destination-mac-address | any} [operator port [port]] [precedence
precedence] [tos tos] [fragments] [time-range time-range-name]
[match-all tcp-flag]

User Datagram Protocol (UDP)
[sn] permit udp [VID [out][inner in]]{source source –wildcard | host source | any} {host
source-mac-address | any } [ operator port [port]] {destination destination-wildcard |
host destination | any} {host
destination-mac-address | any} [operator port [port]] [precedence
precedence] [tos tos] [fragments] [time-range time-range-name]
5. Extended IPv6 ACL
54-24
DES-7200 CLI Reference Guide
mac -address | any } {destination
| host