options protocol.access if=network interface spec (interface_name)
na_protocolaccess page says, "network interface spec is a comma separated list of one or more network interface names. Valid network interface names can be obtained from the ifconfig -a command."
This leads me to believe anything displayed in the ifconfig -a command can be used, however all the examples I dug up show if=e0, e2, e3 etc. no listing of vifs or vlans.