Two rules are needed: one for port 1-7 and another one for vlan port 8
