create access_profile ethernet vlan profile_id 1
config access_profile profile_id 1 add access_id auto_assign ethernet vlan manag  port 1-24 permit
create access_profile ip source_ip_mask 0.0.0.0 udp src_port_mask 0xFFFF profile_id 2
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 68  port 1-24 deny
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 67  port 1-24 deny
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 137  port 1-24 deny
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 138  port 1-24 deny
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 445  port 1-24 deny
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 593  port 1-24 deny
create access_profile ip source_ip_mask 0.0.0.0 tcp src_port_mask 0xFFFF profile_id 4
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 135 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 137 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 138 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 139 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 445 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 593 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 4444 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 9999 port 1-24 deny

create vlan manag tag 10
create access_profile ethernet vlan profile_id 1
config access_profile profile_id 1 add access_id auto_assign ethernet vlan manag  port 1-24 permit
create access_profile ip source_ip_mask 0.0.0.0 udp src_port_mask 0xFFFF profile_id 2
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 68  port 1-24 deny
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 67  port 1-24 deny
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 137  port 1-24 deny
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 138  port 1-24 deny
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 445  port 1-24 deny
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 593  port 1-24 deny
create access_profile ip source_ip_mask 0.0.0.0 tcp src_port_mask 0xFFFF profile_id 4
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 135 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 137 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 138 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 139 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 445 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 593 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 4444 port 1-24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 9999 port 1-24 deny
save

reboot


DGS-3324SR:4#show config current_config
Command: show config current_config
 
#-------------------------------------------------------------------------------
#                     DGS-3324SR Stackable Ethernet Switch
#                                Configuration
#
#                           Firmware: Build 4.40-B26
#              Copyright(C) 2004-2007 D-Link  All rights reserved.
#-------------------------------------------------------------------------------
 
...

# ACL

create access_profile ethernet vlan profile_id 1
create access_profile ip source_ip_mask 0.0.0.0 udp src_port_mask 0xFFFF profile_id 2
create access_profile ip source_ip_mask 0.0.0.0 tcp src_port_mask 0xFFFF profile_id 4
disable cpu_interface_filtering
config access_profile profile_id 1 add access_id auto_assign ethernet vlan manag  port 1:1-1:24 permit
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 68  port 1:1-1:24 deny
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 67  port 1:1-1:24 deny
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 137  port 1:1-1:24 deny
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 138  port 1:1-1:24 deny
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 445  port 1:1-1:24 deny
config access_profile profile_id 2 add access_id auto_assign ip source_ip 0.0.0.0 udp src_port 593  port 1:1-1:24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 135  port 1:1-1:24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 137  port 1:1-1:24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 138  port 1:1-1:24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 139  port 1:1-1:24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 445  port 1:1-1:24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 593  port 1:1-1:24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 4444  port 1:1-1:24 deny
config access_profile profile_id 4 add access_id auto_assign ip source_ip 0.0.0.0 tcp src_port 9999  port 1:1-1:24 deny
...