Device Type                : DES-3200-18 Fast Ethernet Switch
Boot PROM Version          : Build 4.00.002
Firmware Version           : Build 4.37.B011
Hardware Version           : C1

DES-3200-18:admin#config filter extensive_netbios all state enable
Command: config filter extensive_netbios all state enable

 Not enough ACL rules available.

Fail!

DES-3200-18:admin#show access_profile
Command: show access_profile

Access Profile Table

Total User Set Rule Entries : 12
Total Used HW Entries       : 136
Total Available HW Entries  : 888

# ACL

create access_profile profile_id 2 ip vlan udp src_port_mask 0xFFFF dst_port_mask 0xFFFF
config access_profile profile_id 2 add access_id 1 ip vlan_id 8 udp src_port 67 port 18 permit
config access_profile profile_id 2 add access_id 2 ip vlan_id 8 udp src_port 67 port 1-17 deny
create access_profile profile_id 3 ip tcp dst_port_mask 0xFFFF
config access_profile profile_id 3 add access_id 1 ip tcp dst_port 135 port 1-18 deny
config access_profile profile_id 3 add access_id 2 ip tcp dst_port 139 port 1-18 deny                                                                           
config access_profile profile_id 3 add access_id 3 ip tcp dst_port 369 port 1-18 deny
config access_profile profile_id 3 add access_id 4 ip tcp dst_port 445 port 1-18 deny
config access_profile profile_id 3 add access_id 5 ip tcp dst_port 593 port 1-18 deny
config access_profile profile_id 3 add access_id 6 ip tcp dst_port 2869 port 1-18 deny
config access_profile profile_id 3 add access_id 7 ip tcp dst_port 5000 port 1-18 deny
create access_profile profile_id 4 ip udp dst_port_mask 0xFFFF
config access_profile profile_id 4 add access_id 1 ip udp dst_port 137 port 1-18 deny
config access_profile profile_id 4 add access_id 2 ip udp dst_port 138 port 1-18 deny
config access_profile profile_id 4 add access_id 3 ip udp dst_port 1900 port 1-18 deny

#CPU Interface Filter

create cpu access_profile profile_id 1 ethernet vlan ethernet_type
config cpu access_profile profile_id 1 add access_id 1 ethernet vlan_id 8 ethernet_type 0x8100 port 1-18 permit                                                                         
config cpu access_profile profile_id 1 add access_id 2 ethernet vlan_id 8 ethernet_type 0x9000 port 1-18 permit
config cpu access_profile profile_id 1 add access_id 3 ethernet vlan_id 8 ethernet_type 0x800 port 1-18 permit
config cpu access_profile profile_id 1 add access_id 4 ethernet vlan_id 8 ethernet_type 0x806 port 1-18 permit
create cpu access_profile profile_id 2 ethernet vlan source_mac FF-FF-FF-FF-FF-FF destination_mac FF-FF-FF-FF-FF-FF ethernet_type
config cpu access_profile profile_id 2 add access_id 1 ethernet vlan_id 8 source_mac 00-00-00-00-00-00 port 1-18 deny
config cpu access_profile profile_id 2 add access_id 2 ethernet vlan_id 8 destination_mac FF-FF-FF-FF-FF-FF ethernet_type 0x800 port 1-18 deny
enable cpu_interface_filtering

# NetBiosFilter

config filter netbios 1-18 state enable
config filter extensive_netbios all state disable

# DhcpServerScreening

config filter dhcp_server ports all state disable
config filter dhcp_server illegal_server_log_suppress_duration 5min
config filter dhcp_server trap_log disable