create access_profile  ip  destination_ip 0.0.0.0 udp dst_port_mask 0xFFFF    profile_id 1
config access_profile profile_id 1  add access_id 1  ip  destination_ip 0.0.0.0 udp dst_port 53  port 1-28 permit
config flow_meter profile_id 1 access_id 1 rate 64 burst 8 rate_exceed drop_packet

create access_profile  packet_content_mask   offset1 l4 2 0xFFFF  profile_id 2
config access_profile profile_id 2  add access_id 1  packet_content   offset1 0x0087 port 1-24 deny
config access_profile profile_id 2  add access_id 2  packet_content   offset1 0x0089 port 1-24 deny
config access_profile profile_id 2  add access_id 3  packet_content   offset1 0x008a port 1-24 deny
config access_profile profile_id 2  add access_id 4  packet_content   offset1 0x008b port 1-24 deny
config access_profile profile_id 2  add access_id 5  packet_content   offset1 0x0b35 port 1-24 deny
config access_profile profile_id 2  add access_id 6  packet_content   offset1 0x076c port 1-24 deny

create access_profile  ip  destination_ip 0.0.0.0 icmp  profile_id 3
config access_profile profile_id 3  add access_id 1  ip  destination_ip 0.0.0.0 icmp  port 25-28 permit
config access_profile profile_id 3  add access_id 2  ip  destination_ip 0.0.0.0 icmp  port 1-24 permit
config flow_meter profile_id 3 access_id 2 rate 64 burst 8 rate_exceed drop_packet

create access_profile  ip  destination_ip 255.0.0.255  profile_id 4
config access_profile profile_id 4  add access_id 1  ip  destination_ip 10.0.0.254  port 1-24 deny

create access_profile  ip  source_ip 255.255.255.255  profile_id 6
config access_profile profile_id 6  add access_id 1  ip  source_ip 10.1.2.3  port 1 permit
...

create access_profile  ip  source_ip 0.0.0.0  profile_id 7
config access_profile profile_id 7  add access_id 1  ip  source_ip 0.0.0.0  port 25-28 permit
config access_profile profile_id 7  add access_id 2  ip  source_ip 0.0.0.0  port 1-24 deny

create access_profile  packet_content_mask   offset1 l2 0 0xFFFF  offset2 l3 14 0xFFFF  offset3 l3 16 0xFFFF  profile_id 8
config access_profile profile_id 8  add access_id 1  packet_content   offset1 0x0806 offset2 0x0a01 offset3 0x0203 port 1 permit
...

create access_profile  packet_content_mask   offset1 l2 0 0xFFFF  profile_id 9
config access_profile profile_id 9  add access_id 1 packet_content   offset1 0x0806 port 1 deny
...

create access_profile profile_id 1 profile_name 1 packet_content_mask offset_chunk_1 24 0xFFFF0000
config access_profile profile_id 1 add access_id 1 packet_content offset_chunk_1 0x08060000 mask 0xFFFF0000 port 23 deny

create access_profile profile_id 1 profile_name Destination ip destination_ip_mask 0.0.0.0 protocol_id_mask 0xFF user_define_mask 0xFFFF0000
config access_profile profile_id 1 add access_id 1 ip destination_ip 0.0.0.0 protocol_id 17 user_define 0x35 mask 0xFFFF port 1-28 permit
config access_profile profile_id 1 add access_id 2 ip destination_ip 0.0.0.0 protocol_id 1 port 25-28 permit
config access_profile profile_id 1 add access_id 3 ip destination_ip 0.0.0.0 protocol_id 1 port 1-24 permit
config access_profile profile_id 1 add access_id 4 ip destination_ip 10.0.0.254 mask 255.0.0.255 port 1-24 deny
config flow_meter profile_id 1 access_id 1 rate 64 burst_size 8 rate_exceed drop_packet
config flow_meter profile_id 1 access_id 3 rate 64 burst_size 8 rate_exceed drop_packet

create access_profile profile_id 2 profile_name PCF packet_content_mask offset_chunk_1 9 0xFFFF offset_chunk_2 3 0xFFFF offset_chunk_3 7 0xFFFF offset_chunk_4 8 0xFFFF0000
config access_profile profile_id 2 add access_id 1 packet_content offset_chunk_2 0x806 mask 0xFFFF offset_chunk_3 0xA5A mask 0xFFFF offset_chunk_4 0x5A4D0000 mask 0xFFFF0000 port 23 permit
config access_profile profile_id 2 add access_id 10 packet_content offset_chunk_2 0x806 mask 0xFFFF port 23 deny

create access_profile profile_id 3 profile_name Source ip source_ip_mask 255.255.255.255
config access_profile profile_id 3 add access_id 1 ip source_ip 10.90.90.77 port 23 permit
config access_profile profile_id 3 add access_id 9 ip source_ip 0.0.0.0 mask 0.0.0.0 port 25-28 permit
config access_profile profile_id 3 add access_id 10 ip source_ip 0.0.0.0 mask 0.0.0.0 port 1-24 deny

create access_profile profile_id 1 profile_name Destination ip destination_ip_mask 0.0.0.0 protocol_id_mask 0xFF user_define_mask 0xFFFF0000
# DNS 53 порт
config access_profile profile_id 1 add access_id 1 ip destination_ip 0.0.0.0 protocol_id 17 user_define 0x35 mask 0xFFFF port 1-28 permit
config access_profile profile_id 1 add access_id 2 ip destination_ip 0.0.0.0 protocol_id 1 port 25-28 permit
config access_profile profile_id 1 add access_id 3 ip destination_ip 0.0.0.0 protocol_id 1 port 1-24 permit
config access_profile profile_id 1 add access_id 4 ip destination_ip 10.0.0.254 mask 255.0.0.255 port 1-24 deny
# DHCP 67, 68 порты разрешить
config access_profile profile_id 1 add access_id auto_assign ip protocol_id 17 user_define 0x43 mask 0xFFFF port 1-28 permit
config access_profile profile_id 1 add access_id auto_assign ip protocol_id 17 user_define 0x44 mask 0xFFFF port 1-28 permit
# 135
config access_profile profile_id 1 add access_id auto_assign ip destination_ip 0.0.0.0 protocol_id 6 user_define 0x87 mask 0xFFFF port 1-24 deny
config access_profile profile_id 1 add access_id auto_assign ip destination_ip 0.0.0.0 protocol_id 17 user_define 0x87 mask 0xFFFF port 1-24 deny
# 137
config access_profile profile_id 1 add access_id auto_assign ip destination_ip 0.0.0.0 protocol_id 6 user_define 0x89 mask 0xFFFF port 1-24 deny
config access_profile profile_id 1 add access_id auto_assign ip destination_ip 0.0.0.0 protocol_id 17 user_define 0x89 mask 0xFFFF port 1-24 deny
# 138
config access_profile profile_id 1 add access_id auto_assign ip destination_ip 0.0.0.0 protocol_id 6 user_define 0x8A mask 0xFFFF port 1-24 deny
config access_profile profile_id 1 add access_id auto_assign ip destination_ip 0.0.0.0 protocol_id 17 user_define 0x8A mask 0xFFFF port 1-24 deny
# 139
config access_profile profile_id 1 add access_id auto_assign ip destination_ip 0.0.0.0 protocol_id 6 user_define 0x8B mask 0xFFFF port 1-24 deny
config access_profile profile_id 1 add access_id auto_assign ip destination_ip 0.0.0.0 protocol_id 17 user_define 0x8B mask 0xFFFF port 1-24 deny
# 2869
config access_profile profile_id 1 add access_id auto_assign ip destination_ip 0.0.0.0 protocol_id 6 user_define 0xB35 mask 0xFFFF port 1-24 deny
config access_profile profile_id 1 add access_id auto_assign ip destination_ip 0.0.0.0 protocol_id 17 user_define 0xB35 mask 0xFFFF port 1-24 deny
# 1900
config access_profile profile_id 1 add access_id auto_assign ip destination_ip 0.0.0.0 protocol_id 6 user_define 0x76C mask 0xFFFF port 1-24 deny
config access_profile profile_id 1 add access_id auto_assign ip destination_ip 0.0.0.0 protocol_id 17 user_define 0x76C mask 0xFFFF port 1-24 deny
config flow_meter profile_id 1 access_id 1 rate 64 burst_size 8 rate_exceed drop_packet
config flow_meter profile_id 1 access_id 3 rate 64 burst_size 8 rate_exceed drop_packet

# ARP SPOOFING PREVENTION
create access_profile profile_id 2 profile_name PCF packet_content_mask offset_chunk_1 9 0xFFFF offset_chunk_2 3 0xFFFF offset_chunk_3 7 0xFFFF offset_chunk_4 8 0xFFFF0000
config access_profile profile_id 2 add access_id 1 packet_content offset_chunk_2 0x806 mask 0xFFFF offset_chunk_3 0xA01 mask 0xFFFF offset_chunk_4 0x02030000 mask 0xFFFF0000 port 9 permit
config access_profile profile_id 2 add access_id 10 packet_content offset_chunk_2 0x806 mask 0xFFFF port 1-24 deny

# Привязка
create access_profile profile_id 3 profile_name Source ip source_ip_mask 255.255.255.255
config access_profile profile_id 3 add access_id 1 ip source_ip 10.1.2.3 port 9 permit
config access_profile profile_id 3 add access_id 9 ip source_ip 0.0.0.0 mask 0.0.0.0 port 25-28 permit
# Блокируем всех остальных
config access_profile profile_id 3 add access_id 10 ip source_ip 0.0.0.0 mask 0.0.0.0 port 1-24 deny

config access_profile profile_id 3 add access_id 9 ip source_ip 0.0.0.0 mask 0.0.0.0 port 25-28 permit