This object indicates if the result of the packet examination is 'permit' or 'deny'. The default is 'permit'. permit - Specifies that packets matching the access profile are permitted to be forwarded by the switch. deny - Specifies that packets matching the access profile are not permitted to be forwarded by the switch and will be filtered. mirror - Specifies that the packets matching the access profile are copied to the mirror port. Note : The ACL mirror function will function after mirror is enabled and a mirror port has been configured. lease-renew - Specifies the packets matching the access profile are copied to the CPU. Note : After a user enables the port's lease-renew state, all kinds of DHCP packets (including unicast and broadcast DHCP packets) will be copied to the CPU (using user ACL mask and rule). set-drop-precedence - Specifies that packets matching the access profile are set to drop precedence.