
extNaclC.addSC("default", "Set a command to its defaults");
extNaclC.addSC("deny", "Specify packets to reject");
	extNaclC.deny.addSC("<0-255>", "An IP protocol number");
		extNaclC.deny["<0-255>"].addSC("A.B.C.D", "Source address");
			extNaclC.deny["<0-255>"]["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny["<0-255>"]["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny["<0-255>"]["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny["<0-255>"]["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny["<0-255>"].addSC("any", "Any source host");
			extNaclC.deny["<0-255>"].any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny["<0-255>"].any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny["<0-255>"].any.addSC("any", "Any destination host");
			extNaclC.deny["<0-255>"].any.addSC("host", "A single destination host");
				extNaclC.deny["<0-255>"].any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny["<0-255>"].addSC("host", "A single source host");
			extNaclC.deny["<0-255>"].host.addSC("Hostname or A.B.C.D", "Source address");
	extNaclC.deny.addSC("ahp", "Authentication Header Protocol");
		extNaclC.deny.ahp.addSC("A.B.C.D", "Source address");
			extNaclC.deny.ahp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.ahp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ahp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.ahp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.ahp.addSC("any", "Any source host");
			extNaclC.deny.ahp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ahp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.ahp.any.addSC("any", "Any destination host");
			extNaclC.deny.ahp.any.addSC("host", "A single destination host");
				extNaclC.deny.ahp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.ahp.addSC("host", "A single source host");
			extNaclC.deny.ahp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.ahp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ahp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.ahp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("eigrp", "Cisco's EIGRP routing protocol");
		extNaclC.deny.eigrp.addSC("A.B.C.D", "Source address");
			extNaclC.deny.eigrp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.eigrp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.eigrp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.eigrp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.eigrp.addSC("any", "Any source host");
			extNaclC.deny.eigrp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.eigrp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.eigrp.any.addSC("any", "Any destination host");

			extNaclC.deny.eigrp.any.addSC("host", "A single destination host");
				extNaclC.deny.eigrp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.eigrp.addSC("host", "A single source host");
			extNaclC.deny.eigrp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.eigrp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.eigrp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.eigrp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("esp", "Encapsulation Security Payload");
		extNaclC.deny.esp.addSC("A.B.C.D", "Source address");
			extNaclC.deny.esp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.esp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.esp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.esp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.esp.addSC("any", "Any source host");
			extNaclC.deny.esp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.esp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.esp.any.addSC("any", "Any destination host");

			extNaclC.deny.esp.any.addSC("host", "A single destination host");
				extNaclC.deny.esp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.esp.addSC("host", "A single source host");
			extNaclC.deny.esp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.esp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.esp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.esp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("gre", "Cisco's GRE tunneling");
		extNaclC.deny.gre.addSC("A.B.C.D", "Source address");
			extNaclC.deny.gre["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.gre["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.gre["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.gre["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.gre.addSC("any", "Any source host");
			extNaclC.deny.gre.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.gre.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.gre.any.addSC("any", "Any destination host");
			extNaclC.deny.gre.any.addSC("host", "A single destination host");
				extNaclC.deny.gre.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.gre.addSC("host", "A single source host");
			extNaclC.deny.gre.host.addSC("Hostname or A.B.C.D", "Source address");
	extNaclC.deny.addSC("icmp", "Internet Control Message Protocol");
		extNaclC.deny.icmp.addSC("A.B.C.D", "Source address");
			extNaclC.deny.icmp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.icmp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.icmp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.icmp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.icmp.addSC("any", "Any source host");
			extNaclC.deny.icmp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.icmp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.icmp.any.addSC("any", "Any destination host");

			extNaclC.deny.icmp.any.addSC("host", "A single destination host");
				extNaclC.deny.icmp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.icmp.addSC("host", "A single source host");
			extNaclC.deny.icmp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.icmp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.icmp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.icmp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("igmp", "Internet Gateway Message Protocol");
		extNaclC.deny.igmp.addSC("A.B.C.D", "Source address");
			extNaclC.deny.igmp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.igmp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.igmp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.igmp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.igmp.addSC("any", "Any source host");
			extNaclC.deny.igmp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.igmp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.igmp.any.addSC("any", "Any destination host");

			extNaclC.deny.igmp.any.addSC("host", "A single destination host");
				extNaclC.deny.igmp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.igmp.addSC("host", "A single source host");
			extNaclC.deny.igmp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.igmp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.igmp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.igmp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("igrp", "Cisco's IGRP routing protocol");
		extNaclC.deny.igrp.addSC("A.B.C.D", "Source address");
			extNaclC.deny.igrp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.igrp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.igrp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.igrp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.igrp.addSC("any", "Any source host");
			extNaclC.deny.igrp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.igrp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.igrp.any.addSC("any", "Any destination host");

			extNaclC.deny.igrp.any.addSC("host", "A single destination host");
				extNaclC.deny.igrp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.igrp.addSC("host", "A single source host");
			extNaclC.deny.igrp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.igrp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.igrp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.igrp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("ip", "Any Internet Protocol");
		extNaclC.deny.ip.addSC("A.B.C.D", "Source address");
			extNaclC.deny.ip["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.ip["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ip["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.ip["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.ip.addSC("any", "Any source host");
			extNaclC.deny.ip.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ip.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.ip.any.addSC("any", "Any destination host");

			extNaclC.deny.ip.any.addSC("host", "A single destination host");
				extNaclC.deny.ip.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.ip.addSC("host", "A single source host");
			extNaclC.deny.ip.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.ip.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ip.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.ip.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("ipinip", "IP in IP tunneling");
		extNaclC.deny.ipinip.addSC("A.B.C.D", "Source address");
			extNaclC.deny.ipinip["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");

		extNaclC.deny.ipinip.addSC("any", "Any source host");
			extNaclC.deny.ipinip.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ipinip.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.ipinip.any.addSC("any", "Any destination host");

			extNaclC.deny.ipinip.any.addSC("host", "A single destination host");
				extNaclC.deny.ipinip.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.ipinip.addSC("host", "A single source host");
			extNaclC.deny.ipinip.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.ipinip.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ipinip.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.ipinip.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("nos", "KA9Q NOS compatible IP over IP tunneling");
		extNaclC.deny.nos.addSC("A.B.C.D", "Source address");
			extNaclC.deny.nos["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.nos["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.nos["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.nos["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.nos.addSC("any", "Any source host");
			extNaclC.deny.nos.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.nos.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.nos.any.addSC("any", "Any destination host");

			extNaclC.deny.nos.any.addSC("host", "A single destination host");
				extNaclC.deny.nos.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.nos.addSC("host", "A single source host");
			extNaclC.deny.nos.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.nos.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.nos.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.nos.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("ospf", "OSPF routing protocol");
		extNaclC.deny.ospf.addSC("A.B.C.D", "Source address");
			extNaclC.deny.ospf["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.ospf["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ospf["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.ospf["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.ospf.addSC("any", "Any source host");
			extNaclC.deny.ospf.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ospf.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.ospf.any.addSC("any", "Any destination host");
			extNaclC.deny.ospf.any.addSC("host", "A single destination host");
				extNaclC.deny.ospf.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.ospf.addSC("host", "A single source host");
			extNaclC.deny.ospf.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.ospf.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ospf.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.ospf.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("pcp", "Payload Compression Protocol");
		extNaclC.deny.pcp.addSC("A.B.C.D", "Source address");
			extNaclC.deny.pcp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.pcp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.pcp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.pcp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.pcp.addSC("any", "Any source host");

		extNaclC.deny.pcp.addSC("host", "A single source host");
			extNaclC.deny.pcp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.pcp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.pcp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.pcp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("pim", "Protocol Independent Multicast");
		extNaclC.deny.pim.addSC("A.B.C.D", "Source address");
			extNaclC.deny.pim["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.pim["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.pim["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.pim["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.pim.addSC("any", "Any source host");

		extNaclC.deny.pim.addSC("host", "A single source host");

	extNaclC.deny.addSC("tcp", "Transmission Control Protocol");
		extNaclC.deny.tcp.addSC("A.B.C.D", "Source address");
			extNaclC.deny.tcp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
		extNaclC.deny.tcp.addSC("any", "Any source host");
			extNaclC.deny.tcp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.tcp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.tcp.any.addSC("any", "Any destination host");
			extNaclC.deny.tcp.any.addSC("eq", "Match only packets on a given port number");

			extNaclC.deny.tcp.any.addSC("gt", "Match only packets with a greater port number");

			extNaclC.deny.tcp.any.addSC("host", "A single destination host");
				extNaclC.deny.tcp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
			extNaclC.deny.tcp.any.addSC("lt", "Match only packets with a lower port number");

			extNaclC.deny.tcp.any.addSC("neq", "Match only packets not on a given port number");

			extNaclC.deny.tcp.any.addSC("range", "Match only packets in the range of port numbers");

		extNaclC.deny.tcp.addSC("host", "A single source host");
			extNaclC.deny.tcp.host.addSC("Hostname or A.B.C.D", "Source address");

	extNaclC.deny.addSC("udp", "User Datagram Protocol");
		extNaclC.deny.udp.addSC("A.B.C.D", "Source address");
			extNaclC.deny.udp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");

		extNaclC.deny.udp.addSC("any", "Any source host");

		extNaclC.deny.udp.addSC("host", "A single source host");
			extNaclC.deny.udp.host.addSC("Hostname or A.B.C.D", "Source address");

extNaclC.addSC("dynamic", "Specify a DYNAMIC list of PERMITs or DENYs");
	extNaclC.dynamic.addSC("WORD", "Name of a Dynamic list");
		extNaclC.dynamic.WORD.addSC("deny", "Specify packets to reject");
			extNaclC.dynamic.WORD.deny.addSC("<0-255>", "An IP protocol number");
				extNaclC.dynamic.WORD.deny["<0-255>"].addSC("A.B.C.D", "Source address");
				extNaclC.dynamic.WORD.deny["<0-255>"].addSC("any", "Any source host");
				extNaclC.dynamic.WORD.deny["<0-255>"].addSC("host", "A single source host");
			extNaclC.dynamic.WORD.deny.addSC("ahp", "Authentication Header Protocol");
				extNaclC.dynamic.WORD.deny.ahp.addSC("A.B.C.D", "Source address");
				extNaclC.dynamic.WORD.deny.ahp.addSC("any", "Any source host");
				extNaclC.dynamic.WORD.deny.ahp.addSC("host", "A single source host");
			extNaclC.dynamic.WORD.deny.addSC("eigrp", "Cisco's EIGRP routing protocol");
				extNaclC.dynamic.WORD.deny.eigrp.addSC("A.B.C.D", "Source address");
				extNaclC.dynamic.WORD.deny.eigrp.addSC("any", "Any source host");
				extNaclC.dynamic.WORD.deny.eigrp.addSC("host", "A single source host");
			extNaclC.dynamic.WORD.deny.addSC("esp", "Encapsulation Security Payload");
				extNaclC.dynamic.WORD.deny.esp.addSC("A.B.C.D", "Source address");
				extNaclC.dynamic.WORD.deny.esp.addSC("any", "Any source host");
				extNaclC.dynamic.WORD.deny.esp.addSC("host", "A single source host");
			extNaclC.dynamic.WORD.deny.addSC("gre", "Cisco's GRE tunneling");
				extNaclC.dynamic.WORD.deny.gre.addSC("A.B.C.D", "Source address");
				extNaclC.dynamic.WORD.deny.gre.addSC("any", "Any source host");
				extNaclC.dynamic.WORD.deny.gre.addSC("host", "A single source host");
			extNaclC.dynamic.WORD.deny.addSC("icmp", "Internet Control Message Protocol");
				extNaclC.dynamic.WORD.deny.icmp.addSC("A.B.C.D", "Source address");
				extNaclC.dynamic.WORD.deny.icmp.addSC("any", "Any source host");
				extNaclC.dynamic.WORD.deny.icmp.addSC("host", "A single source host");
			extNaclC.dynamic.WORD.deny.addSC("igmp", "Internet Gateway Message Protocol");
				extNaclC.dynamic.WORD.deny.igmp.addSC("A.B.C.D", "Source address");
				extNaclC.dynamic.WORD.deny.igmp.addSC("any", "Any source host");
				extNaclC.dynamic.WORD.deny.igmp.addSC("host", "A single source host");
			extNaclC.dynamic.WORD.deny.addSC("igrp", "Cisco's IGRP routing protocol");
				extNaclC.dynamic.WORD.deny.igrp.addSC("A.B.C.D", "Source address");
				extNaclC.dynamic.WORD.deny.igrp.addSC("any", "Any source host");
				extNaclC.dynamic.WORD.deny.igrp.addSC("host", "A single source host");
			extNaclC.dynamic.WORD.deny.addSC("ip", "Any Internet Protocol");
				extNaclC.dynamic.WORD.deny.ip.addSC("A.B.C.D", "Source address");
				extNaclC.dynamic.WORD.deny.ip.addSC("any", "Any source host");
				extNaclC.dynamic.WORD.deny.ip.addSC("host", "A single source host");
			extNaclC.dynamic.WORD.deny.addSC("ipinip", "IP in IP tunneling");
				extNaclC.dynamic.WORD.deny.ipinip.addSC("A.B.C.D", "Source address");
				extNaclC.dynamic.WORD.deny.ipinip.addSC("any", "Any source host");
				extNaclC.dynamic.WORD.deny.ipinip.addSC("host", "A single source host");
			extNaclC.dynamic.WORD.deny.addSC("nos", "KA9Q NOS compatible IP over IP tunneling");
				extNaclC.dynamic.WORD.deny.nos.addSC("A.B.C.D", "Source address");
				extNaclC.dynamic.WORD.deny.nos.addSC("any", "Any source host");
				extNaclC.dynamic.WORD.deny.nos.addSC("host", "A single source host");
			extNaclC.dynamic.WORD.deny.addSC("ospf", "OSPF routing protocol");
				extNaclC.dynamic.WORD.deny.ospf.addSC("A.B.C.D", "Source address");
				extNaclC.dynamic.WORD.deny.ospf.addSC("any", "Any source host");
				extNaclC.dynamic.WORD.deny.ospf.addSC("host", "A single source host");
			extNaclC.dynamic.WORD.deny.addSC("pcp", "Payload Compression Protocol");
				extNaclC.dynamic.WORD.deny.pcp.addSC("A.B.C.D", "Source address");
				extNaclC.dynamic.WORD.deny.pcp.addSC("any", "Any source host");
				extNaclC.dynamic.WORD.deny.pcp.addSC("host", "A single source host");
			extNaclC.dynamic.WORD.deny.addSC("pim", "Protocol Independent Multicast");
				extNaclC.dynamic.WORD.deny.pim.addSC("A.B.C.D", "Source address");
				extNaclC.dynamic.WORD.deny.pim.addSC("any", "Any source host");
				extNaclC.dynamic.WORD.deny.pim.addSC("host", "A single source host");
			extNaclC.dynamic.WORD.deny.addSC("tcp", "Transmission Control Protocol");
				extNaclC.dynamic.WORD.deny.tcp.addSC("A.B.C.D", "Source address");
				extNaclC.dynamic.WORD.deny.tcp.addSC("any", "Any source host");
				extNaclC.dynamic.WORD.deny.tcp.addSC("host", "A single source host");
			extNaclC.dynamic.WORD.deny.addSC("udp", "User Datagram Protocol");
				extNaclC.dynamic.WORD.deny.udp.addSC("A.B.C.D", "Source address");
				extNaclC.dynamic.WORD.deny.udp.addSC("any", "Any source host");
				extNaclC.dynamic.WORD.deny.udp.addSC("host", "A single source host");
		extNaclC.dynamic.WORD.addSC("timeout", "Maximum time for dynamic ACL to live");
			extNaclC.dynamic.WORD.timeout.addSC("<1-9999>", "Maximum time to live");
				extNaclC.dynamic.WORD.timeout["<1-9999>"].addSC("deny", "Specify packets to reject");
extNaclC.addSC("evaluate", "Evaluate an access list");
	extNaclC.evaluate.addSC("WORD", "IP reflexive access list name");
extNaclC.addSC("exit", "Exit from access-list configuration mode");
extNaclC.addSC("no", "Negate a command or set its defaults");
	extNaclC.no.addSC("deny", "Specify packets to reject");
		extNaclC.no.deny.addSC("<0-255>", "An IP protocol number");

		extNaclC.no.deny.addSC("ahp", "Authentication Header Protocol");

		extNaclC.no.deny.addSC("eigrp", "Cisco's EIGRP routing protocol");

		extNaclC.no.deny.addSC("esp", "Encapsulation Security Payload");

		extNaclC.no.deny.addSC("gre", "Cisco's GRE tunneling");

		extNaclC.no.deny.addSC("icmp", "Internet Control Message Protocol");

		extNaclC.no.deny.addSC("igmp", "Internet Gateway Message Protocol");

		extNaclC.no.deny.addSC("igrp", "Cisco's IGRP routing protocol");

		extNaclC.no.deny.addSC("ip", "Any Internet Protocol");

		extNaclC.no.deny.addSC("ipinip", "IP in IP tunneling");

		extNaclC.no.deny.addSC("nos", "KA9Q NOS compatible IP over IP tunneling");

		extNaclC.no.deny.addSC("ospf", "OSPF routing protocol");

		extNaclC.no.deny.addSC("pcp", "Payload Compression Protocol");

		extNaclC.no.deny.addSC("pim", "Protocol Independent Multicast");

		extNaclC.no.deny.addSC("tcp", "Transmission Control Protocol");

		extNaclC.no.deny.addSC("udp", "User Datagram Protocol");

	extNaclC.no.addSC("dynamic", "Specify a DYNAMIC list of PERMITs or DENYs");
		extNaclC.no.dynamic.addSC("WORD", "Name of a Dynamic list");
			extNaclC.no.dynamic.WORD.addSC("deny", "Specify packets to reject");

			extNaclC.no.dynamic.WORD.addSC("timeout", "Maximum time for dynamic ACL to live");
				extNaclC.no.dynamic.WORD.timeout.addSC("<1-9999>", "Maximum time to live");
	extNaclC.no.addSC("evaluate", "Evaluate an access list");
		extNaclC.no.evaluate.addSC("WORD", "IP reflexive access list name");
extNaclC.addSC("permit", "Specify packets to forward");
	extNaclC.permit.addSC("<0-255>", "An IP protocol number");
		extNaclC.permit["<0-255>"].addSC("A.B.C.D", "Source address");
			extNaclC.permit["<0-255>"]["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit["<0-255>"]["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit["<0-255>"]["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit["<0-255>"]["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit["<0-255>"].addSC("any", "Any source host");
			extNaclC.permit["<0-255>"].any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit["<0-255>"].any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit["<0-255>"].any.addSC("any", "Any destination host");

			extNaclC.permit["<0-255>"].any.addSC("host", "A single destination host");
				extNaclC.permit["<0-255>"].any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit["<0-255>"].addSC("host", "A single source host");
			extNaclC.permit["<0-255>"].host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit["<0-255>"].host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit["<0-255>"].host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit["<0-255>"].host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("ahp", "Authentication Header Protocol");
		extNaclC.permit.ahp.addSC("A.B.C.D", "Source address");
			extNaclC.permit.ahp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.ahp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ahp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.ahp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.ahp.addSC("any", "Any source host");
			extNaclC.permit.ahp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ahp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.ahp.any.addSC("any", "Any destination host");

			extNaclC.permit.ahp.any.addSC("host", "A single destination host");
				extNaclC.permit.ahp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.ahp.addSC("host", "A single source host");
			extNaclC.permit.ahp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.ahp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ahp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.ahp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("eigrp", "Cisco's EIGRP routing protocol");
		extNaclC.permit.eigrp.addSC("A.B.C.D", "Source address");
			extNaclC.permit.eigrp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.eigrp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.eigrp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.eigrp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.eigrp.addSC("any", "Any source host");
			extNaclC.permit.eigrp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.eigrp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.eigrp.any.addSC("any", "Any destination host");

			extNaclC.permit.eigrp.any.addSC("host", "A single destination host");
				extNaclC.permit.eigrp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.eigrp.addSC("host", "A single source host");
			extNaclC.permit.eigrp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.eigrp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.eigrp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.eigrp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("esp", "Encapsulation Security Payload");
		extNaclC.permit.esp.addSC("A.B.C.D", "Source address");
			extNaclC.permit.esp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.esp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.esp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.esp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.esp.addSC("any", "Any source host");

		extNaclC.permit.esp.addSC("host", "A single source host");

	extNaclC.permit.addSC("gre", "Cisco's GRE tunneling");
		extNaclC.permit.gre.addSC("A.B.C.D", "Source address");

		extNaclC.permit.gre.addSC("any", "Any source host");

		extNaclC.permit.gre.addSC("host", "A single source host");
			extNaclC.permit.gre.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.gre.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.gre.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.gre.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("icmp", "Internet Control Message Protocol");
		extNaclC.permit.icmp.addSC("A.B.C.D", "Source address");
			extNaclC.permit.icmp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.icmp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.icmp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.icmp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.icmp.addSC("any", "Any source host");
			extNaclC.permit.icmp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.icmp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.icmp.any.addSC("any", "Any destination host");

			extNaclC.permit.icmp.any.addSC("host", "A single destination host");
				extNaclC.permit.icmp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.icmp.addSC("host", "A single source host");
			extNaclC.permit.icmp.host.addSC("Hostname or A.B.C.D", "Source address");

	extNaclC.permit.addSC("igmp", "Internet Gateway Message Protocol");
		extNaclC.permit.igmp.addSC("A.B.C.D", "Source address");
			extNaclC.permit.igmp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");

		extNaclC.permit.igmp.addSC("any", "Any source host");
			extNaclC.permit.igmp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.igmp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.igmp.any.addSC("any", "Any destination host");

			extNaclC.permit.igmp.any.addSC("host", "A single destination host");
				extNaclC.permit.igmp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.igmp.addSC("host", "A single source host");
			extNaclC.permit.igmp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.igmp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.igmp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.igmp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("igrp", "Cisco's IGRP routing protocol");
		extNaclC.permit.igrp.addSC("A.B.C.D", "Source address");
			extNaclC.permit.igrp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.igrp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.igrp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.igrp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.igrp.addSC("any", "Any source host");
			extNaclC.permit.igrp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.igrp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.igrp.any.addSC("any", "Any destination host");

			extNaclC.permit.igrp.any.addSC("host", "A single destination host");
				extNaclC.permit.igrp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.igrp.addSC("host", "A single source host");
			extNaclC.permit.igrp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.igrp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.igrp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.igrp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("ip", "Any Internet Protocol");
		extNaclC.permit.ip.addSC("A.B.C.D", "Source address");
			extNaclC.permit.ip["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.ip["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ip["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.ip["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.ip.addSC("any", "Any source host");
			extNaclC.permit.ip.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ip.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.ip.any.addSC("any", "Any destination host");

			extNaclC.permit.ip.any.addSC("host", "A single destination host");
				extNaclC.permit.ip.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.ip.addSC("host", "A single source host");
			extNaclC.permit.ip.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.ip.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ip.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.ip.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("ipinip", "IP in IP tunneling");
		extNaclC.permit.ipinip.addSC("A.B.C.D", "Source address");
			extNaclC.permit.ipinip["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.ipinip["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ipinip["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.ipinip["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.ipinip.addSC("any", "Any source host");
			extNaclC.permit.ipinip.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ipinip.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.ipinip.any.addSC("any", "Any destination host");

			extNaclC.permit.ipinip.any.addSC("host", "A single destination host");
				extNaclC.permit.ipinip.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.ipinip.addSC("host", "A single source host");
			extNaclC.permit.ipinip.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.ipinip.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ipinip.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.ipinip.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("nos", "KA9Q NOS compatible IP over IP tunneling");
		extNaclC.permit.nos.addSC("A.B.C.D", "Source address");
			extNaclC.permit.nos["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.nos["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.nos["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.nos["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.nos.addSC("any", "Any source host");
			extNaclC.permit.nos.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.nos.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.nos.any.addSC("any", "Any destination host");

			extNaclC.permit.nos.any.addSC("host", "A single destination host");
				extNaclC.permit.nos.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.nos.addSC("host", "A single source host");
			extNaclC.permit.nos.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.nos.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.nos.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.nos.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("ospf", "OSPF routing protocol");
		extNaclC.permit.ospf.addSC("A.B.C.D", "Source address");
			extNaclC.permit.ospf["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.ospf["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ospf["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.ospf["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.ospf.addSC("any", "Any source host");
			extNaclC.permit.ospf.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ospf.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.ospf.any.addSC("any", "Any destination host");

			extNaclC.permit.ospf.any.addSC("host", "A single destination host");
				extNaclC.permit.ospf.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.ospf.addSC("host", "A single source host");
			extNaclC.permit.ospf.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.ospf.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ospf.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.ospf.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("pcp", "Payload Compression Protocol");
		extNaclC.permit.pcp.addSC("A.B.C.D", "Source address");
			extNaclC.permit.pcp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.pcp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.pcp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.pcp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.pcp.addSC("any", "Any source host");
			extNaclC.permit.pcp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.pcp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.pcp.any.addSC("any", "Any destination host");

			extNaclC.permit.pcp.any.addSC("host", "A single destination host");
				extNaclC.permit.pcp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.pcp.addSC("host", "A single source host");
			extNaclC.permit.pcp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.pcp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.pcp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.pcp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("pim", "Protocol Independent Multicast");
		extNaclC.permit.pim.addSC("A.B.C.D", "Source address");
			extNaclC.permit.pim["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.pim["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.pim["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.pim["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.pim.addSC("any", "Any source host");
			extNaclC.permit.pim.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.pim.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.pim.any.addSC("any", "Any destination host");

			extNaclC.permit.pim.any.addSC("host", "A single destination host");
				extNaclC.permit.pim.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.pim.addSC("host", "A single source host");
			extNaclC.permit.pim.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.pim.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.pim.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.pim.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("tcp", "Transmission Control Protocol");
		extNaclC.permit.tcp.addSC("A.B.C.D", "Source address");
			extNaclC.permit.tcp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.tcp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.tcp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.tcp["A.B.C.D"]["A.B.C.D"].addSC("eq", "Match only packets on a given port number");
				extNaclC.permit.tcp["A.B.C.D"]["A.B.C.D"].addSC("gt", "Match only packets with a greater port number");
				extNaclC.permit.tcp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
				extNaclC.permit.tcp["A.B.C.D"]["A.B.C.D"].addSC("lt", "Match only packets with a lower port number");
				extNaclC.permit.tcp["A.B.C.D"]["A.B.C.D"].addSC("neq", "Match only packets not on a given port number");
				extNaclC.permit.tcp["A.B.C.D"]["A.B.C.D"].addSC("range", "Match only packets in the range of port numbers");
		extNaclC.permit.tcp.addSC("any", "Any source host");
			extNaclC.permit.tcp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.tcp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.tcp.any.addSC("any", "Any destination host");

			extNaclC.permit.tcp.any.addSC("eq", "Match only packets on a given port number");

			extNaclC.permit.tcp.any.addSC("gt", "Match only packets with a greater port number");

			extNaclC.permit.tcp.any.addSC("host", "A single destination host");
				extNaclC.permit.tcp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
			extNaclC.permit.tcp.any.addSC("lt", "Match only packets with a lower port number");

			extNaclC.permit.tcp.any.addSC("neq", "Match only packets not on a given port number");

			extNaclC.permit.tcp.any.addSC("range", "Match only packets in the range of port numbers");

		extNaclC.permit.tcp.addSC("host", "A single source host");
			extNaclC.permit.tcp.host.addSC("Hostname or A.B.C.D", "Source address");

	extNaclC.permit.addSC("udp", "User Datagram Protocol");
		extNaclC.permit.udp.addSC("A.B.C.D", "Source address");
			extNaclC.permit.udp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");

		extNaclC.permit.udp.addSC("any", "Any source host");
			extNaclC.permit.udp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.udp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.udp.any.addSC("any", "Any destination host");
				extNaclC.permit.udp.any.any.addSC("dscp", "Match packets with given dscp value");
				extNaclC.permit.udp.any.any.addSC("fragments", "Check non-initial fragments");
				extNaclC.permit.udp.any.any.addSC("log", "Log matches against this entry");
				extNaclC.permit.udp.any.any.addSC("log-input", "Log matches against this entry, including input interface");
				extNaclC.permit.udp.any.any.addSC("precedence", "Match packets with given precedence value");
				extNaclC.permit.udp.any.any.addSC("reflect", "Create reflexive access list entry");
				extNaclC.permit.udp.any.any.addSC("time-range", "Specify a time-range");
				extNaclC.permit.udp.any.any.addSC("tos", "Match packets with given TOS value");
			extNaclC.permit.udp.any.addSC("eq", "Match only packets on a given port number");

			extNaclC.permit.udp.any.addSC("gt", "Match only packets with a greater port number");

			extNaclC.permit.udp.any.addSC("host", "A single destination host");
				extNaclC.permit.udp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
			extNaclC.permit.udp.any.addSC("lt", "Match only packets with a lower port number");

			extNaclC.permit.udp.any.addSC("neq", "Match only packets not on a given port number");

			extNaclC.permit.udp.any.addSC("range", "Match only packets in the range of port numbers");

		extNaclC.permit.udp.addSC("host", "A single source host");
			extNaclC.permit.udp.host.addSC("Hostname or A.B.C.D", "Source address");

extNaclC.addSC("remark", "Access list entry comment");
	extNaclC.remark.addSC("LINE", "Comment up to 100 characters");
