Which criteria is used to define an extended MAC ACL filter?