incorrect Cisco-AVPair example
Inbound firewall rules to govern traffic from the client to the server. Given in Cisco-style ACL
format (e.g. permit tcp from any to any) subnet masks are specified wildcard style.
^^ this is PF syntax ^^
For Cisco-style ACL it should be permit tcp any any
or full string: Cisco-AVPair = "ip:inacl#1=permit tcp any any"